bbPress Plugin for WordPress Cross-Site Request Forgery Vulnerability Allowing Privilege Escalation

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the bbPress plugin for WordPress, affecting all versions through 2.6.11. The issue arises from inadequate nonce validation in the 'bbp_user_add_role_on_register()' function, allowing unauthenticated attackers to manipulate privileges and gain the role of a bbPress Keymaster. This exploitation requires tricking a site administrator into clicking a link that initiates the forged request. To address this vulnerability, the plugin has removed the option to select a role during user registration, a change implemented in version 2.6.12.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling an attacker to gain key administrative rights within the bbPress environment.

Remediation

Users are advised to update the bbPress plugin to version 2.6.12 or a newer patched version.