- User Registration & Membership plugin flaw allows attackers to gain admin access without login
- Exposed nonce values enable unauthorized backend requests and privilege escalation
- Sensitive user data becomes exposed once administrative privileges are obtained
A critical security flaw in a widely used WordPress plugin allows unauthenticated attackers to bypass authentication controls and gain full administrative access to affected websites.
