Critical · published November 27, 2025
🚨 A crafty attacker can register as an 'administrator' without breaking a sweat! The FindAll Listing plugin for WordPress allows unauthorized access to sensitive roles in all versions up to 1.0.5. 🔥 Think of it like a rogue guest sneaking into an exclusive club by simply filling out a membership form without proper checks—where anyone can claim VIP status without being questioned! This vulnerability could lead to unauthorized users gaining full administrative control of your WordPress site, allowing them to change settings, delete content, or even install malicious software. An attacker could potentially exploit this flaw to wreak havoc on your site and compromise sensitive data, making it an absolute nightmare!
Think of it like a rogue guest sneaking into an exclusive club by simply filling out a membership form without proper checks—where anyone can claim VIP status without being questioned! The issue arises from the 'findall_listing_user_registration_additional_params' function, which fails to restrict the user roles that can be assigned during the registration process. If the FindAll Membership plugin is also activated, attackers can register with the 'administrator' role without any authentication.
This vulnerability could lead to unauthorized users gaining full administrative control of your WordPress site, allowing them to change settings, delete content, or even install malicious software. An attacker could potentially exploit this flaw to wreak havoc on your site and compromise sensitive data, making it an absolute nightmare! To protect your site, immediately update the FindAll Listing plugin to version 1.0.6 or later. Additionally, consider disabling the user registration feature unless absolutely necessary and regularly review user roles to ensure no unauthorized access has occurred. You've got this! Follow these steps to safeguard your site and keep those sneaky attackers at bay! 🛡️