The PublishPress Capabilities WordPress plugin (<= 2.50.0) contains a privilege escalation vulnerability that automatically grants 'Editor' users full site-wide capability management permissions without administrative consent.
PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus
wordpress
privilege-escalation
web-application
1t
1c