WPForms User Registration <= 2.1.0 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation
highThe WPForms User Registration plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.1.0. This is due to a missing capability check when adding a role option to a form. This makes it possible for authenticated attackers, with contributor-level access and above, to create a fo...
- CVSS:
- 8
- Affected:
- up to 2.1.0
- Fixed in:
- 2.1.2
- Disclosed:
- Jul 18, 2024