Postem Ipsum WordPress Plugin Privilege Escalation Vulnerability

A vulnerability in the Postem Ipsum plugin for WordPress, present in all versions through 3.0.1, allows authenticated users with Subscriber-level access and above to create user accounts with administrator privileges. This issue arises from a missing capability check in the 'postem_ipsum_generate_users()' function, enabling unauthorized data modification and privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized users to gain administrative rights by creating accounts with admin privileges.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access can send a request to the 'wp_ajax_postem_ipsum_generate_users' action. This request can include data to create a new user account, which will be granted administrative privileges due to the lack of proper authorization checks.

Remediation

No known patch is available. It is recommended to uninstall the affected plugin and find a replacement.