Threats tagged 'ghsa-x377-cjjw-xcfr'

The User Frontend WordPress plugin versions prior to 4.3.12 contain a vulnerability that allows unauthenticated users to manipulate the role assigned during registration. This flaw permits registration with elevated roles such as Editor, but not Administrator. The issue occurs only when the PHP sodium extension is unavailable and a registration page is configured.