CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permission_callback() function in versions 2.2.1 to 2.15.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to read, create, update or delete any user meta, including flipping their own wp_capabilities to administrator and fully escalate their privileges.
Explanation of Vulnerability in Simple Terms
Offsprout Page Builder versions 2.2.1 through 2.15.2 contain an improper access control vulnerability. An authenticated user with low privileges can read, modify, or delete sensitive data and functionality on the site. The vulnerability requires network access and valid login credentials but no additional user interaction.
What an attacker can do
Read, modify, or delete sensitive data and site functionality with a low-privilege account.
Potential impact on your site
Any authenticated user can compromise site data, modify content, or disrupt site availability.
Conditions required to exploit
Valid login credentials with low-level site access; network access to the site.
Key dates
External resources
Related vulnerabilities
