Critical severity9.8NVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026

CVE-2026-12394

Description

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/MemberGlutllm-fuzzy
Range: <1.1.5

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/6b126a3e-30d5-4bed-ba47-33e589ec2852/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000