Privilege Escalation Vulnerability in School Management System Plugin by WordPress

CVE-2024-12470

Summary

The School Management System – SakolaWP plugin for WordPress is exposed to a privilege escalation vulnerability that affects versions up to 1.0.8. The issue arises from inadequate restrictions in the user registration function, which allows unauthenticated attackers to register themselves as administrators. This flaw could enable malicious users to gain unauthorized access to sensitive areas of the site, potentially leading to data breaches and compromising the integrity of the management system.

References