WPExperts User Management Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WPExperts User Management plugin for WordPress, affecting versions through 1.2. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and possibly full control over the WordPress site.

Remediation

Users of the WPExperts User Management plugin are advised to update to version 1.2 or later. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.