CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.1. This is due to a misconfigured capability check on the 'save_secondary_roles_field' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to assign themselves additional roles including Administrator.
Explanation of Vulnerability in Simple Terms
Melapress Role Editor versions 1.1.1 and earlier contain an authorization flaw that allows authenticated users with low privileges to perform actions they should not be permitted to do. An attacker with a basic user account can read sensitive data, modify site content, or disrupt service availability. The vulnerability requires network access and a valid login but no additional user interaction.
What an attacker can do
Read sensitive data, modify content, or disrupt site availability with a low-privilege user account.
Potential impact on your site
Unauthorized users can access, modify, or delete content and settings they should not be able to touch.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
