Cpe:2.3:a:memberpress:memberpress_corporate_accounts:*:*:*:*:*:wordpress:*:*

The MemberPress Corporate Accounts plugin for WordPress contains a mass assignment vulnerability that allows authenticated users with corporate sub-account privileges to escalate to administrator by injecting unauthorized fields during user creation.