Privilege Escalation

AJAXPrivilege Escalation

Privilege Escalation in User Registration & Membership

Versions of User Registration & Membership up to 5.1.2 let unauthenticated attackers create administrator accounts via an unguarded AJAX endpoint.