WP Freeio Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the WP Freeio plugin for WordPress, affecting all versions through 1.2.21. The issue arises because the process_register() function does not limit the user roles that can be selected during registration. This flaw allows unauthenticated attackers to register as 'administrator' users, thereby gaining administrative access to the site.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative privileges on the WordPress site.

Remediation

Users are advised to update the WP Freeio plugin to version 1.2.22 or a newer patched version.