CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Lizza LMS Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'lizza_lms_pro_register_user_front_end' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site.
Explanation of Vulnerability in Simple Terms
Lizza LMS Pro versions up to 1.0.3 contain a privilege management flaw that allows unauthenticated attackers to gain full control over the application. The vulnerability requires no user interaction and can be exploited remotely over the network. An attacker can read sensitive data, modify content, and disrupt service availability.
What an attacker can do
Gain full administrative access to the LMS without authentication and read, modify, or delete any data.
Potential impact on your site
Complete compromise of the LMS platform, including student data, course content, and user accounts.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
