Community by PeepSo – Social Network, Membership, Registration, User Profiles < 1.6.1 - Privilege Escalation
2016-06-21 00:00
James GolovichStrategic Overview
StatusPatched in 1.6.1
Affected PluginCommunity by PeepSo – Download from PeepSo.com
Affected Version
<= 1.6.0CVSS8.8High
CVE
CVE-2016-10968Vulnerability Overview
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.
Technical Analysis
REMEDIATION: Update to version 1.6.1, or a newer patched version --- IDENTIFIER: CWE-269 (Improper Privilege Management) The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C