Vikinger WordPress Theme Privilege Escalation Vulnerability

A vulnerability allowing privilege escalation has been identified in the Vikinger theme for WordPress, affecting all versions through 1.9.30. The issue arises from inadequate restrictions on user_meta in the 'vikinger_user_meta_update_ajax' function. This flaw enables authenticated attackers with Subscriber-level access or higher to elevate their privileges to Administrator-level.

Impact

Exploitation of this vulnerability allows authenticated users to escalate their privileges to that of an Administrator.

Remediation

Users can update to version 1.9.31 or a newer patched version to address this vulnerability.