Threats tagged 'ghsa-3v5c-rmm5-g74r'

The Import and export users and customers plugin for WordPress contains a privilege escalation vulnerability affecting all versions up to and including 2.0.8. This flaw arises from an incomplete blocklist in the save_extra_user_profile_fields() function, which fails to restrict multisite-prefixed capability meta keys in WordPress Multisite environments. Authenticated users with Subscriber-level access or higher can exploit this by submitting crafted profile updates to escalate their privileges to Administrator on any subsite. Exploitation requires prior import of a CSV with multisite-prefixed capability headers and enabling the 'Show fields in profile?' option, which exposes these keys as editable fields.