Skip to content
OpenAdvisories

Vendor

davefx

1 known vulnerabilities.

Products

Membership & User Roles for WooCommerce (Automatic Role Changer) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-104767

    Membership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache

    The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the `maybe_add_role_to_user()` function unconditionally re-assigning eve…

    davefx Membership & User Roles for WooCommerce (Automatic Role Changer) Web / CMS