CVE-2020-36666 – Multiple e-plugins - Subscriber+ Privilege Escalation

https://notcve.org/view.php?id=CVE-2020-36666

06 Mar 2023 — The directory-pro WordPress plugin before 1.9.5, final-user-wp-frontend-user-profiles WordPress plugin before 1.2.2, producer-retailer WordPress plugin through TODO, photographer-directory WordPress plugin before 1.0.9, real-estate-pro WordPress plugin before 1.7.1, institutions-directory WordPress plugin before 1.3.1, lawyer-directory WordPress plugin before 1.2.9, doctor-listing WordPress plugin before 1.3.6, Hotel Listing WordPress plugin before 1.3.7, fitness-trainer WordPress plugin before 1.4.1, wp-me... • https://codecanyon.net/user/e-plugins • CWE-266: Incorrect Privilege Assignment •