WordPress Homey Login Register Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WordPress Homey Login Register plugin, affecting versions through 2.4.0. This vulnerability allows low-privileged users to escalate their privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain higher privileges, with the possibility of taking full control of the website.

Remediation

Users of the WordPress Homey Login Register plugin are advised to update to version 2.4.0 or later. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability.