CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to unauthorized admin account creation in all versions up to, and including, 67.7.0. This is due to the plugin not properly validating a user's capabilities prior to adding users. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new users, including admins.
Explanation of Vulnerability in Simple Terms
WPGYM contains a privilege management flaw that allows authenticated users with low-level access to gain unauthorized administrative capabilities. An attacker with a standard user account can read, modify, or delete sensitive site data and configuration. All versions up to 67.7.0 are affected. Update to a version newer than 67.7.0 when available.
What an attacker can do
Read, modify, or delete site data and settings with administrative privileges.
Potential impact on your site
Any registered user can escalate to admin-level access and compromise your entire site.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the WordPress site.
Key dates
External resources
Related vulnerabilities
