Multiple E-plugins (Various Versions) - Authenticated (Subscriber+) Privilege Escalation

2023-03-06 00:00
Omar Badran

Strategic Overview

Status
Patched in 1.3.7
Affected PluginHotel Listing
Affected Version< 1.3.7
CVSS8.8High
CVECVE-2020-36666
View all Hotel Listing vulnerabilities

Vulnerability Overview

Multiple plugins by the vendor E-plugins are vulnerable to privilege escalation due to insufficient restriction on several functions called via AJAX actions that set a user's role based on supplied role information. This makes it possible authenticated, subscriber-level and above attackers to elevate their privileges to that of an administrator.

Technical Analysis

REMEDIATION: Update to version 1.3.7, or a newer patched version --- IDENTIFIER: CWE-266 (Incorrect Privilege Assignment) A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

External References

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C