Amento Tech WPGuppy Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WPGuppy plugin by Amento Tech Pvt Ltd, affecting versions through 1.1.0. This vulnerability allows low-privileged users to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining access to higher-level permissions and control over the website.

Remediation

Users of the WPGuppy plugin should update to version 1.1.1 or later. Patchstack users can enable auto-update for vulnerable plugins.