https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 03:42:59 +0000 https://db.gcve.eu/vuln/cve-2026-18053 <p><strong>Affected:</strong> LearnDash MemberDash</p> <p>The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. This is due to a mass-assignment vulnerability in the `user_account_manager()` function&#39;s edit_profile branch, where all submitted `$_POST` fields are iterated and directly assigned to the current member object via the `MS_Model` `__set()` magic method with no field allowlist and no capability or ownership check on the submitted `id` parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject an arbitrary user ID via the `id` parameter — overwriting any WordPress user&#39;s email address and password, including the site administrator&#39;s — and subsequently use those modified credentials to gain full administrative access to the site.</p> <p><strong>Affected:</strong> LearnDash MemberDash</p> <p>The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. This is due to a mass-assignment vulnerability in the `user_account_manager()` function&#39;s edit_profile branch, where all submitted `$_POST` fields are iterated and directly assigned to the current member object via the `MS_Model` `__set()` magic method with no field allowlist and no capability or ownership check on the submitted `id` parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject an arbitrary user ID via the `id` parameter — overwriting any WordPress user&#39;s email address and password, including the site administrator&#39;s — and subsequently use those modified credentials to gain full administrative access to the site.</p> https://db.gcve.eu/vuln/cve-2026-18053