CVE-2026-104767 | CVSS: 7.5 | 严重级别: HIGH
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the `maybe_add_role_to_user()` function unconditionally re-assigning every role stored in the `dfxwcrc_foreign_roles` user meta cache without verifying that each cached role is still actively assigned by the external provider — a condition made permanent by `remember_foreign_roles()`, which merges new foreign roles into the cache but never evicts roles that have since been revoked. This makes it possible for a
参考链接:
• https://plugins.trac.wordpress.org/browser/dfx-woo-role-changer/trunk/dfx-woo-ro
• https://plugins.trac.wordpress.org/browser/dfx-woo-role-changer/trunk/dfx-woo-ro
• https://plugins.trac.wordpress.org/browser/dfx-woo-role-changer/trunk/dfx-woo-ro
📌 数据来源: NVD 官方