📦 Fundengine

The FundEngine WordPress plugin allows authenticated attackers with subscriber-level access or higher to escalate their privileges to administrator. This occurs because the plugin fails to properly va...