CVE-2026-12394

The MemberGlut WordPress plugin prior to version 1.1.5 is vulnerable due to inadequate validation of user roles during front-end registration, enabling unauthenticated users to create accounts with arbitrary roles, including administrator. This flaw poses a critical risk, as it can lead to complete site compromise and unauthorized access to sensitive data. WordPress site administrators using this plugin should prioritize immediate updates to mitigate this severe security threat.