Critical · published May 31, 2025
🚨 A missing capability check on the stocktend_object endpoint could let unauthenticated attackers sneak in and gain admin rights! 🔥 This vulnerability is like leaving the back door of a club wide open while the bouncer is busy checking IDs at the front—anyone can stroll in and take over! With this exploit, a rogue user could rewrite user permissions, turning a regular account into an admin in an instant. This means they could modify settings, install malicious plugins, or even wipe the site entirely—it's an absolute nightmare!
This vulnerability is like leaving the back door of a club wide open while the bouncer is busy checking IDs at the front—anyone can stroll in and take over! The Profitori plugin's missing check allows attackers to execute the save_object_as_user() function without authentication, enabling them to manipulate the wp_capabilities meta field directly and escalate privileges.
With this exploit, a rogue user could rewrite user permissions, turning a regular account into an admin in an instant. This means they could modify settings, install malicious plugins, or even wipe the site entirely—it's an absolute nightmare! Update the Profitori plugin to version 2.1.1.4 immediately to close this gap. Also, review user permissions on your WordPress site to ensure no unauthorized privileges have been escalated. Keeping your plugins up-to-date is crucial! You've got this! Take these steps, and you'll keep your site secure as a fortress. 🛡️