WPGateway WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WPGateway plugin for WordPress, affecting versions through 3.5. This vulnerability allows unauthenticated attackers to create malicious administrator accounts. The issue has been actively exploited in the wild.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling attackers to create administrator accounts and potentially take over affected WordPress sites.

Remediation

There is no known patch available for this vulnerability. It is recommended to uninstall the WPGateway plugin immediately and check for any unauthorized administrator accounts on the WordPress site.