Multiple E-plugins (Various Versions) - Authenticated (Subscriber+) Privilege Escalation
2023-03-06 00:00
Omar BadranStrategic Overview
StatusPatched in 1.3.7
Affected PluginHotel Listing
Affected Version
< 1.3.7CVSS8.8High
CVE
CVE-2020-36666Vulnerability Overview
Multiple plugins by the vendor E-plugins are vulnerable to privilege escalation due to insufficient restriction on several functions called via AJAX actions that set a user's role based on supplied role information. This makes it possible authenticated, subscriber-level and above attackers to elevate their privileges to that of an administrator.
Technical Analysis
REMEDIATION: Update to version 1.3.7, or a newer patched version --- IDENTIFIER: CWE-266 (Incorrect Privilege Assignment) A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C