Homey Login Register WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Homey Login Register plugin for WordPress, affecting all versions through 2.4.0. The vulnerability arises because the plugin allows users to choose their own roles when registering new accounts. This functionality can be exploited by unauthenticated attackers to create accounts with administrative privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative privileges on the WordPress site by creating accounts with the administrator role.

Remediation

There is no known patch available for this vulnerability. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.