A vulnerability in the User Registration & Membership WordPress plugin allows authenticated users to elevate their privileges to administrator status, posing a critical threat to site integrity.

This flaw stems from improper privilege management (CWE-269), where the plugin fails to enforce a capability check when saving login settings. This allows an authenticated user with limited management permissions to modify arbitrary site options and gain full administrative access.

Successful exploitation of this vulnerability grants an attacker full administrative control over the WordPress installation. This facilitates total site compromise, including the potential for remote code execution, unauthorized data exfiltration, and the ability to modify or delete site content. Given the high CVSS score of 7.2, this vulnerability represents a significant risk to business operations and data security.

Immediate Action: Update the User Registration & Membership plugin to version 5.2.6 or later immediately.

Proactive Monitoring: Monitor WordPress administrative audit logs for unauthorized user profile modifications or unexpected changes to site settings.

Compensating Controls: Implement a Web Application Firewall (WAF) to block suspicious requests targeting plugin settings pages until the update can be applied.

Public Exploit Available: No

The ability for a restricted user to escalate privileges to administrator makes this a high-priority security concern. Administrators must prioritize updating the User Registration & Membership plugin to version 5.2.6 to close the vulnerability. Delaying this update significantly increases the risk of a full site takeover.