Indeed Membership Pro < 12.8 - Unauthenticated Privilege Escalation

Description

The plugin is vulnerable to privilege escalation due to the plugin not properly restricting access to functionality that allows privilege assignment. This makes it possible for unauthenticated attackers to gain access to accounts that have higher privileges, such as administrator.