WordPress Checkout Mestres WP Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WordPress plugin Checkout Mestres WP, affecting versions through 8.7.5. This vulnerability allows low-privileged users to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining higher access rights and possibly full control over the website.

Remediation

Users of the Checkout Mestres WP plugin are advised to update to a version later than 8.7.5. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability until an official update is available.