Privilege Escalation Vulnerability in WordPress

CVE-2023-1874

Summary

The WP Data Access plugin for WordPress contains a vulnerability allowing users with minimal permissions to elevate their own user roles. This is due to insufficient authorization checks on the 'multiple_roles_update' function, particularly in versions up to and including 5.3.7. When the 'Enable role management' setting is activated on the site, authenticated attackers can exploit this weakness by modifying the 'wpda_role[]' parameter during a profile update, effectively granting themselves unauthorized privileges.

References