Known CVE

WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation

MemberGlut WordPress plugin < 1.1.5 contains a broken access control vulnerability caused by lack of validation of roles during front-end registration, letting unauthenticated users register with arbitrary roles including administrator, exploit requires no authentication.