CyberRota Analysis
AI-GeneratedThe ProfileGrid WordPress plugin prior to version 5.9.9.8 is vulnerable due to insufficient restrictions on group registration for anonymous users, enabling them to register into privileged groups and potentially gain roles up to Administrator. This flaw poses a significant risk of privilege escalation, allowing unauthorized access to sensitive administrative functions. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this security risk.
Original NVD Description
The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into through its front-end registration, allowing unauthenticated users to register directly into a privileged group and be granted that group's configured role, up to Administrator when such a group exists, leading to privilege escalation.