Import and export users and customers WordPress plugin privilege escalation
A regular account on this WordPress user plugin can gain administrator control.
Summary
A non-atomic cron settings save in this WordPress user import and export plugin lets a logged-in user holding only user-creation rights become Administrator. Versions up to and including 2.5.11 are affected.
Affected when
- A custom role with create_users but without promote_users or edit_users
- An administrator has saved the cron-tab settings beforehand
- No successful save happens before the next unattended cron run
What to do
No fixed version is named. Check that the plugin runs a version newer than 2.5.11 and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen