Threats tagged 'ghsa-cw7m-pr9p-fp7m'

The Simple User Capabilities plugin for WordPress contains a critical privilege escalation vulnerability in all versions up to and including 1.0. The flaw arises from a missing capability check in the suc_submit_capabilities() function, allowing unauthenticated attackers to elevate any user account to administrator privileges.