CVE-2023-41956

The Simple Membership plugin prior to version 4.3.5 contains a privilege escalation flaw that enables attackers with low-level account access to elevate their permissions to higher privilege levels. By exploiting this vulnerability, a malicious actor could potentially gain administrative control over the affected WordPress site. The issue was identified by Rafie Muhammad and has been resolved in version 4.3.5 and later.

Based on public CVE data (MITRE/NVD).