Woocommerce Multiple Addresses Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the Woocommerce Multiple Addresses plugin for WordPress, affecting all versions through 1.0.7.1. The issue arises from inadequate restrictions on user meta that can be modified via the save_multiple_shipping_addresses() function. This vulnerability allows authenticated attackers with Subscriber-level access or higher to elevate their privileges to that of an administrator.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling users to gain administrative rights.