Privilege Escalation Vulnerability in WP EasyCart Plugin for WordPress

CVE-2026-17553

What is CVE-2026-17553?

The WP EasyCart plugin for WordPress is susceptible to a privilege escalation vulnerability in versions up to and including 5.9.3. The issue arises from the ec_ajax_save_page_default_options() AJAX handler, which directly processes $_POST keys without an allowlist. This exposes a weakness because it relies solely on the 'manage_options' permission or the custom 'wpec_manager' capability. An attacker with Store Manager-level access can exploit this vulnerability to elevate their privileges. They can do so by manipulating WordPress options to set default roles to 'administrator' and enabling user self-registration, effectively allowing them to create an administrator account.

References