WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability

CVE-2023-41957

Summary

An improper privilege management vulnerability has been identified in the Simple Membership Plugin for WordPress, which can lead to privilege escalation. This issue affects versions from n/a through 4.3.4, enabling unauthorized users to gain elevated access rights. Website administrators using this plugin should assess their installations and ensure that they apply any available patches to mitigate potential security risks.

References