User Role Editor <= 4.24 - Authenticated Privilege Escalation
2016-04-04 00:00
AnonymousStrategic Overview
Vulnerability Overview
The User Role Editor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'update' function in versions up to, and including, 4.24. This makes it possible for any authenticated attackers to grant themselves the administrator role.
Technical Analysis
REMEDIATION: Update to version 4.25, or a newer patched version --- IDENTIFIER: CWE-285 (Improper Authorization) The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C