Simple Membership Plugin Flaws Expose WordPress Sites

Patchstack uncovered an unauthenticated role privilege escalation flaw and an account takeover vulnerability

account account takeover escalation expose flaw flaws plugin privilege privilege escalation privilege escalation flaw role simple takeover unauthenticated uncovered vulnerability wordpress