Privilege Escalation in Royal Core Plugin for WordPress

CVE-2024-12129

What is CVE-2024-12129?

The Royal Core plugin for WordPress has a critical flaw that allows authenticated users with Subscriber-level access and above to exploit the 'royal_restore_backup' function. Due to a lack of capability checks, these attackers can alter essential site options, including changing the default registration role to administrator. This loophole opens a pathway for malicious users to gain administrative control over vulnerable WordPress sites by enabling user registration functions.

References