Skip to content
OpenAdvisories

Vendor

itthinx

4 known vulnerabilities.

Products

Groups 2 Affiliates 1 Groups – Memberships and Access Control 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-77203

    Groups <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' Shortcode

    The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groups_join() function deriving group-join eligibility from the ambient post's author capabi…

    itthinx Groups – Memberships and Access Control Web / CMS