https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T08:09:02.910832+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12394 CVE-2026-12394 — MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator 2026-10-09T08:09:02.912226+00:00

Affected: Unknown MemberGlut

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.