Product
The Simpler Checkout plugin for WordPress prior to 1.5.4 fails to initialize secret keys for automatic login, allowing authenticated subscribers to elevate privileges to administrator.