AWEOS GmbH WordPress Email Notifications for Updates Privilege Escalation Vulnerability

A missing authorization vulnerability in the AWEOS GmbH WordPress plugin 'Email Notifications for Updates' versions through 1.1.6 allows for privilege escalation. This vulnerability could enable a low-privileged user to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining access to higher-level permissions and potentially full control over the website.

Remediation

Users of the 'Email Notifications for Updates' WordPress plugin should update to version 1.2.0 or later. Patchstack users can enable auto-updates for vulnerable plugins.