Real Estate Manager <= 6.7.1 - Subscriber+ Privilege Escalation

2023-08-0900:00:00

wpscan.com

plugin

user metadata

privilege escalation

authentication

role change

security vulnerability

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.0%

JSON

Description The plugin does not validate user metadata to be updated via its rem_save_profile_front function, allowing any authenticated users, such as subscriber to change their role (to administrator for example) by giving the related wp_capabilities when they update their profile