Threats tagged 'ghsa-63fg-ffv3-2xr7'

The Import and export users and customers plugin for WordPress contains a privilege escalation vulnerability affecting all versions up to and including 2.5.11. This flaw arises from a non-atomic multi-option write sequence in the ACUI_Cron::save_settings() function, allowing attackers with certain delegated roles to escalate to Administrator privileges under specific conditions involving cron job execution and prior administrator actions.