AA-Team WordPress Plugins Privilege Escalation Vulnerability
Vulnerability
A privilege escalation vulnerability has been identified in two WordPress plugins by AA-Team: Premium Age Verification / Restriction, versions through 3.0.2, and Responsive Coming Soon Landing Page / Holding Page, versions through 3.0. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control of the website.
Impact
Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and possibly full control over the WordPress site.
Remediation
Patchstack has released a mitigation rule to block attacks targeting this vulnerability. Users can activate this mitigation through Patchstack's services.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.