CVE-2026-77203 WordPress Groups – Memberships and Access Control - Privilege Escalation

WordPress Groups – Memberships and Access Control plugin <= 4.6.0 contains a privilege escalation caused by improper capability checks in groups_join() using ambient post author instead of authenticated user, letting authenticated attackers escalate privileges to Administrator by self-enrolling in privileged groups, exploit requires supplying an Administrator-authored post ID.