CVE-2026-104767 | davefx Membership & User Roles for WooCommerce Plugin up to 20260828 on WordPress maybe_add_role_to_user privileges management

October 14, 2026 Yanac

A vulnerability categorized as critical has been discovered in davefx Membership & User Roles for WooCommerce Plugin up to 20260828 on WordPress. This issue affects the function maybe_add_role_to_user. Executing a manipulation can lead to improper privilege management.

This vulnerability is tracked as CVE-2026-104767. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More