Listee WordPress Theme Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the Listee WordPress theme, affecting all versions through 1.1.6. The issue arises from a flawed validation in the user registration function of the bundled listee-core plugin, which inadequately sanitizes the user_role parameter. This vulnerability allows unauthenticated attackers to register as Administrators by manipulating the user_role parameter during the registration process.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain Administrator privileges on the WordPress site.

Remediation

Users can update to version 1.1.7 or a newer patched version to address this vulnerability.