Critical · published December 20, 2025
🚨 An unauthenticated attacker can snag an administrator role just by registering! The Flex Store Users plugin for WordPress has a shocking privilege escalation vulnerability that opens the door to total control. 🔥 Think of it like a guest sneaking into a fancy restaurant and claiming to be the head chef just by filling out a reservation form — no one checks their credentials! That's how easy it is for an attacker to gain admin access here. If exploited, a malicious individual could gain full control over your site, allowing them to change settings, delete content, or even plant malware — all while you're none the wiser. This could lead to data breaches, website defacement, and serious damage to your reputation!
Think of it like a guest sneaking into a fancy restaurant and claiming to be the head chef just by filling out a reservation form — no one checks their credentials! That's how easy it is for an attacker to gain admin access here. The vulnerability arises because the 'fsUserHandle::signup' and 'fsSellerRole::add_role_seller' functions fail to properly restrict user role assignments during registration, allowing anyone to register with the 'administrator' role if the 'fs_type' parameter is used and the Flex Store Seller plugin is active.
If exploited, a malicious individual could gain full control over your site, allowing them to change settings, delete content, or even plant malware — all while you're none the wiser. This could lead to data breaches, website defacement, and serious damage to your reputation! To secure your site, immediately update the Flex Store Users plugin to version 1.1.1 or later. If you're not using the plugin's features, consider deactivating it altogether. Additionally, regularly audit user roles to ensure no unauthorized changes have been made. You've got this! With these steps, you'll be back in control and your site will be safe and sound. 🛡️