Privilege Escalation in WPLMS Theme for WordPress by VibeThemes

CVE-2015-10139

What is CVE-2015-10139?

The WPLMS theme is susceptible to Privilege Escalation due to improper validation in the 'wp_ajax_import_data' AJAX action. This vulnerability allows authenticated users to access and modify restricted settings, potentially enabling the creation of unauthorized admin accounts that can compromise the security and integrity of the affected WordPress site.

References