CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7 due to insufficient restriction on the 'profile_save_field' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_capabilities' parameter during a profile update.
Explanation of Vulnerability in Simple Terms
Simple User Registration versions 6.7 and earlier contain an access control flaw that allows authenticated users with low privileges to read, modify, or delete sensitive data. An attacker with a basic user account can bypass intended restrictions and gain unauthorized access to protected functionality. This affects confidentiality, integrity, and availability of site data.
What an attacker can do
Read, modify, or delete sensitive data by bypassing access control checks.
Potential impact on your site
Registered users can access and alter data they should not be able to reach, compromising site security and data integrity.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
