Privilege Escalation Vulnerability in Homey Theme for WordPress

CVE-2024-12281

What is CVE-2024-12281?

The Homey Theme for WordPress is susceptible to a privilege escalation vulnerability that allows unauthorized users to elevate their permissions. This issue arises from the theme permitting new account registrants to assign roles such as Editor or Shop Manager without proper validation. As a result, unauthenticated attackers can exploit this weakness by creating an account with elevated privileges, potentially gaining control over critical functionalities of the site.

References