EIP-2026-114158

This exploit demonstrates a privilege escalation vulnerability in the WordPress User Meta Manager plugin (v3.4.6). A registered user can modify the `wp_capabilities` meta field of any user, including their own, to escalate to an administrator role via a crafted AJAX request.