Configurator Theme Core Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Configurator Theme Core plugin for WordPress, affecting all versions through 1.4.7. The issue arises because the plugin fails to properly validate user meta fields before updating them in the database. This vulnerability allows authenticated attackers with Subscriber-level access or higher to escalate their privileges to Administrator.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling users to gain Administrator-level access.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.