漏洞描述
RegistrationMagic WordPress plugin <= 6.0.7.1 contains a privilege escalation caused by improper access control in 'add_menu' via 'rm_user_exists' AJAX action, letting unauthenticated attackers manipulate admin menu capabilities, exploit requires subscriber user for further escalation.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。