Threats tagged 'ghsa-4jxj-r57j-r92m'

The ProfilePress WordPress plugin versions before 4.17.6 contain a vulnerability where negative membership plan identifiers are not properly rejected before checking plan activation status. This flaw allows unauthenticated visitors to sign up for membership plans that administrators have deactivated and gain the associated roles.