Vulnerability · Published Sep 6, 2024 · Assigned by Wordfence
CVE-2024-7493WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta
Critical 9.8
In plain English
A critical-severity privilege mismanagement in WPCOM Member from whyun. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.6%top 52.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The WPCOM Member plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5.2.1. This is due to the plugin allowing arbitrary data to be passed to wp_insert_user() during registration. This makes it possible for unauthenticated attackers to update their role to that of an administrator during registration.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| whyun | WPCOM Member | 0 – through 1.5.2.1 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/ec7f3e0c-a07c-4082-9b6b-12d0fbe0fdc8?source=cve
- https://plugins.trac.wordpress.org/browser/wpcom-member/tags/1.5.2/includes/form-validation.php#L267
- https://plugins.trac.wordpress.org/changeset/3147399/wpcom-member/trunk/includes/form-validation.php