Starfish Reviews Privilege Escalation Vulnerability

A missing authorization vulnerability in the Starfish Review Generation & Marketing WordPress plugin, affecting versions through 3.1.14, allows for privilege escalation. This vulnerability could enable a low-privileged user to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining higher access rights and possibly full control over the website.

Remediation

Users of the Starfish Review Generation & Marketing WordPress plugin are advised to update to a version later than 3.1.14. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability.