Fox LMS WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the Fox LMS WordPress LMS Plugin, affecting all versions up to and including 1.0.5.1. The issue arises because the plugin fails to properly validate the 'role' parameter when new users are created through the '/fox-lms/v1/payments/create-order' REST API endpoint. This vulnerability allows unauthenticated attackers to create user accounts with arbitrary roles, including administrator, potentially leading to complete site compromise.

Impact

Exploitation of this vulnerability allows for unauthorized users to gain administrative privileges, leading to full control over the WordPress site.

Remediation

Users are advised to update the Fox LMS WordPress LMS Plugin to version 1.0.5.2 or a newer patched version.