Threats tagged 'ghsa-f7mc-wpjj-g5hj'

The Divi Membership WordPress plugin versions up to 2.2.0 contain a critical privilege escalation vulnerability. An unauthenticated attacker can exploit improper privilege management in the user registration process to create a new account with administrator privileges. This is achieved by submitting a specially crafted bcrypt hash of the 'administrator' role in the form_id POST parameter. The vulnerability requires a WordPress nonce, which is publicly available on pages rendering the registration form, allowing any visitor to exploit it and gain full site control.