WP Foodbakery Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WP Foodbakery plugin for WordPress, affecting all versions through 4.7. The issue arises because the plugin fails to properly restrict user meta updates during profile registration. This flaw allows unauthenticated attackers to register on the site as administrators.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative privileges on the WordPress site.

Remediation

Users can update to version 4.8 or a newer patched version to address this vulnerability.