NotFound WP User Profiles Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the NotFound WP User Profiles plugin, affecting versions through 2.6.2. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control over the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and possibly full control over the website.

Remediation

Users are advised to update to a version of the WP User Profiles plugin that is later than 2.6.2. For those using Patchstack, a virtual patch is available to mitigate this vulnerability until an official update can be applied.