Privilege Escalation Vulnerability in Spectra Pro Plugin for WordPress

CVE-2024-3828

What is CVE-2024-3828?

The Spectra Pro plugin for WordPress is susceptible to a privilege escalation issue, affecting all versions up to 1.1.5. This vulnerability enables authenticated attackers with author-level access or higher to create registration forms that designate the default role as administrator. Consequently, lower-privileged users could exploit this flaw to gain unauthorized administrator-level privileges, posing a significant risk to the security and integrity of WordPress sites using this plugin.

References