CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'lakit_bkrole' parameter during registration and gain administrator access to the site.
Explanation of Vulnerability in Simple Terms
LA-Studio Element Kit for Elementor versions 1.5.6.3 and earlier contain a privilege management flaw that allows unauthenticated attackers to gain full control over the site without user interaction. The vulnerability affects confidentiality, integrity, and availability of the WordPress installation. Site administrators should update immediately to a version newer than 1.5.6.3.
What an attacker can do
Read, modify, or delete any site data; create admin accounts; run malicious code on the site.
Potential impact on your site
Complete compromise of the WordPress site and all its data without any warning or user action.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
