WordPress Fraction Theme 1.1.1 Privilege Escalation Vulnerability

WordPress Fraction Theme version 1.1.1 suffers from a privilege escalation vulnerability. ------------------------------------------------------------------------------ WordPress Fraction Theme 1.1.1 Previlage Escalation ----------------------------------------------------------------------------...

WordPress Fraction Theme 1.1.1 Privilege Escalation

------------------------------------------------------------------------------ WordPress Fraction Theme 1.1.1 Previlage Escalation ------------------------------------------------------------------------------ - Theme Link:...

Fraction Theme < 1.1.2 - Privilege Escalation

This vulnerability allows an attacker either authenticated or unauthenticated to escalate privileges on the site and have an admin account which may lead to a full site takeover. PoC This will enable user registration: https://example.com/wp-admin/admin-ajax.php?action=otsaveoptionscanregister=1...

WordPress Fraction Theme <= 1.1.1 - Multiple vulnerabilities

This theme is prone to a privilege escalation and cross site request forgery vulnerabilities. Because of that, the attackers can have an admin account or takeover the site. Solution Update the theme...