The SMS Alert Order Notifications – WooCommerce plugin for WordPress suffers from a missing capability check in the updateWcWarrantySettings() function. This flaw allows authenticated users with low privileges (subscriber-level or above) to update arbitrary WordPress options. Specifically, attackers can alter the default registration role to administrator and enable user registration, facilitating privilege escalation to administrative control. Exploitation requires the presence of the woocommerce-warranty plugin. The vulnerability is tracked as CVE-2024-11725 with a CVSS 3.1 score of 8.8 (high severity). No patch or vendor advisory with remediation details is currently available.

Successful exploitation enables attackers with minimal authenticated access to escalate privileges to administrator by modifying WordPress options. This compromises site integrity, confidentiality, and availability, as attackers can create administrative accounts and control the affected WordPress site. The impact is rated high with a CVSS score of 8.8, reflecting network attack vector, low attack complexity, required privileges of low level, no user interaction, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict subscriber-level access and above to trusted users only. Monitor for updates from the plugin vendor or WordPress security advisories. Consider disabling or removing the SMS Alert Order Notifications plugin and the woocommerce-warranty plugin if not essential to reduce exposure.