An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges.
References
| Link | Resource |
|---|---|
| https://wordpress.org/plugins/ultimate-member/#developers | Release Notes Third Party Advisory |
| https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-793c3cedef3b | Exploit Third Party Advisory |
| https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/ | Exploit Third Party Advisory |
| https://wordpress.org/plugins/ultimate-member/#developers | Release Notes Third Party Advisory |
| https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-793c3cedef3b | Exploit Third Party Advisory |
| https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/ | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:28
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 10.0 |
| References | () https://wordpress.org/plugins/ultimate-member/#developers - Release Notes, Third Party Advisory | |
| References | () https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-793c3cedef3b - Exploit, Third Party Advisory | |
| References | () https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/ - Exploit, Third Party Advisory |
Information
Published : 2021-01-04 18:15
Updated : 2024-11-21 05:28
NVD link : CVE-2020-36157
Mitre link : CVE-2020-36157
CVE.ORG link : CVE-2020-36157
JSON object : View
Products Affected
ultimatemember
- ultimate_member
CWE