CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Templines Elementor Helper Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.7. This is due to allowing arbitrary user meta updates. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to Administrator. The vulnerability can only be exploited when the BuddyPress plugin is also installed and activated.
Explanation of Vulnerability in Simple Terms
Templines Elementor Helper Core versions 2.7 and earlier contain a privilege management flaw that allows authenticated users with low-level permissions to gain unauthorized access to sensitive data and modify site content. An attacker with a basic user account can read confidential information, alter pages or posts, and disrupt site availability without requiring additional user interaction.
What an attacker can do
Read sensitive data, modify site content, and disrupt availability with a low-privilege user account.
Potential impact on your site
Compromised user accounts can escalate privileges to read private data, alter published content, and cause downtime.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
