School Management System SakolaWP Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the School Management System – SakolaWP plugin for WordPress, affecting all versions through 1.0.8. The issue arises because the registration function fails to properly restrict the roles users can choose when registering. This flaw allows unauthenticated attackers to create accounts with administrative privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to register as administrative users, potentially leading to unauthorized access and control over the WordPress site.

Remediation

No known patch is available. It is recommended to uninstall the affected plugin and find a replacement.