Mojoomla WPAMS Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the MojoJoomla WPAMS plugin for WordPress, affecting versions through 44.0 (as of August 17, 2023). This vulnerability allows low-privileged users to escalate their privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain higher privileges, with the possibility of taking full control of the website if high privileges are obtained.

Remediation

Users of the MojoJoomla WPAMS WordPress plugin are advised to update to the latest version. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.