What is GHSA-2qr9-rw6c-j2jw?

GHSA-2qr9-rw6c-j2jw is a security advisory published by GitHub Security Advisories with unknown severity. The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end...

Which CVE IDs does GHSA-2qr9-rw6c-j2jw cover?

GHSA-2qr9-rw6c-j2jw covers the following CVE IDs: CVE-2026-12394. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-2qr9-rw6c-j2jwunknown

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end...

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-12394 →

📋 Description

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-12394
https://wpscan.com/vulnerability/6b126a3e-30d5-4bed-ba47-33e589ec2852
https://github.com/advisories/GHSA-2qr9-rw6c-j2jw