WordPress Industrial Theme Privilege Escalation Vulnerability

A vulnerability in the Industrial theme for WordPress, affecting all versions through 1.7.8, allows for unauthorized data modification that could lead to privilege escalation. This issue arises from a lack of capability checks in the _ajax_get_total_content_import_items() function, enabling authenticated attackers with subscriber-level access or higher to update arbitrary options on the WordPress site. Exploitation of this vulnerability could allow attackers to change the default role for new users to administrator and activate user registration, thereby gaining administrative access on the site.

Impact

Exploitation of this vulnerability could result in unauthorized administrative access to a WordPress site.