Privilege Escalation Vulnerability in Membership & User Roles for WooCommerce Plugin by WordPress

CVE-2026-104767

What is CVE-2026-104767?

The Membership & User Roles for WooCommerce plugin for WordPress contains a vulnerability that allows authenticated attackers to escalate their privileges. The flaw lies in the 'maybe_add_role_to_user()' function, which improperly handles user roles assigned in the 'dfxwcrc_foreign_roles' user meta cache without adequate verification. This omission allows attackers with subscriber-level access to maliciously restore previously revoked roles, such as Administrator, to their accounts. Exploiting this vulnerability requires the Replace Roles mode to be activated and prior legitimate access to the Administrator role while the plugin was active. Thus, without adequate safeguards, the plugin poses significant security risks to WordPress sites.

References