DHVC Form WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the DHVC Form plugin for WordPress, affecting all versions through 2.4.7. The issue arises because the plugin allows users to specify the 'role' field during registration, enabling unauthenticated attackers to register as administrators on vulnerable sites.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative privileges on the WordPress site.

Remediation

Users are advised to update the DHVC Form plugin to version 2.4.8 or a newer patched version.