Threats tagged 'ghsa-w5h9-m5j6-5394'

The Blocksy Companion WordPress plugin contains a critical privilege escalation vulnerability in versions up to and including 2.1.58. This flaw allows unauthenticated attackers to bypass Dokan's vendor-registration nonce check and specify arbitrary roles during user registration, enabling them to escalate privileges to a Dokan 'seller' (vendor) account. The vulnerability also automatically authenticates the attacker into the elevated account, granting publishing capabilities beyond those of a normal customer.