Starfish Review Generation and Marketing for WordPress Privilege Escalation Vulnerability

A vulnerability in the Starfish Review Generation & Marketing for WordPress plugin, affecting all versions through 3.1.19, allows authenticated users with Subscriber-level access and above to bypass capability checks and modify arbitrary site options. This unauthorized data manipulation can lead to privilege escalation by enabling attackers to change the default user role for new registrations to administrator, thereby gaining administrative access on the site.

Impact

Exploitation of this vulnerability could result in unauthorized users gaining administrative privileges on the WordPress site.