CVE-2023-32244CWE-269

WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation

Critical · published May 17, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

🚨 A stealthy privilege escalation lurks in xtemos Woodmart Core, allowing users to climb the ladder of access with ease! 🔥 Think of it like an unguarded back door in a high-security building. Anyone with a little know-how can sneak in and access restricted areas without breaking a sweat, bypassing all the safeguards put in place. An attacker could exploit this vulnerability to gain unauthorized access, potentially enabling them to change settings, view sensitive data, or even take complete control of the system. This could lead to devastating consequences for user data and overall site integrity, making this a critical issue that cannot be ignored!

Put simply

Think of it like an unguarded back door in a high-security building. Anyone with a little know-how can sneak in and access restricted areas without breaking a sweat, bypassing all the safeguards put in place. This improper privilege management vulnerability allows users to elevate their permissions within the Woodmart Core, granting them access rights beyond what they should have, thus compromising the system's security.

What to do

An attacker could exploit this vulnerability to gain unauthorized access, potentially enabling them to change settings, view sensitive data, or even take complete control of the system. This could lead to devastating consequences for user data and overall site integrity, making this a critical issue that cannot be ignored! Update your Woodmart Core plugin to version 1.0.37 or later as soon as possible. Additionally, review user permissions to ensure that access levels are appropriately set and that no unauthorized changes can be made. You've got this! Follow these steps and you'll be back on track, keeping your website secure and user data safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00789 · 55.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-05-17T06:43Z
EPSS history
Timeline
  • 17 MAY 06:43Z
    WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation
    cvelistv5