https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:32:35 +0000 https://cve.radiocsirt.org/vuln/cve-2026-0844 <p><strong>Affected:</strong> nmedia Simple User Registration</p> <p>The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7 due to insufficient restriction on the &#39;profile_save_field&#39; function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the &#39;wp_capabilities&#39; parameter during a profile update.</p> <p><strong>Affected:</strong> nmedia Simple User Registration</p> <p>The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7 due to insufficient restriction on the &#39;profile_save_field&#39; function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the &#39;wp_capabilities&#39; parameter during a profile update.</p> https://cve.radiocsirt.org/vuln/cve-2026-0844