CVE-2023-41957

The Simple Membership plugin before version 4.3.5 contains a privilege escalation vulnerability that allows attackers with low-level account access to gain higher privilege levels. By exploiting this flaw, a malicious user could potentially obtain full administrative control of the affected WordPress site. The vulnerability was identified by Rafie Muhammad and has been patched in version 4.3.5 and later.

Based on public CVE data (MITRE/NVD).