EduKart Pro WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the EduKart Pro plugin for WordPress, affecting all versions through 1.0.3. The issue arises because the 'edukart_pro_register_user_front_end' function does not properly limit the user roles that can be selected during registration. This flaw allows unauthenticated attackers to register users with the 'administrator' role, thereby gaining administrative access to the site.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrator privileges on the WordPress site.

Remediation

No known patch is available. It is recommended to uninstall the affected plugin and find a replacement.