Tag
The Userplace WordPress plugin through 1.2.0 fails to perform authorization checks on an exposed AJAX action, allowing unauthenticated attackers to create administrator accounts and modify site settings for full site takeover.