Templines Elementor Helper Core Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the Templines Elementor Helper Core plugin for WordPress, affecting all versions through 2.7. The issue arises from the plugin's allowance of arbitrary user meta updates, enabling authenticated attackers with Subscriber-level access or higher to elevate their roles to Administrator. This vulnerability can only be exploited if the BuddyPress plugin is also installed and activated.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling users to gain Administrator rights.

Remediation

Users are advised to update the Templines Elementor Helper Core plugin to version 2.8 or a newer patched version.