Ifkooo One-Login Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Ifkooo One-Login WordPress plugin, affecting versions through 1.4. This vulnerability allows users to gain elevated privileges, potentially leading to full control over the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and possibly full control over the WordPress site.

Remediation

Users are advised to remove or replace the One-Login WordPress plugin, as it is likely abandoned and has not been updated in over a year. Deactivating the plugin does not eliminate the security risk unless a virtual patch is applied. Patchstack offers a virtual patch to mitigate this vulnerability until an official fix is available.