Profitori WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Profitori plugin for WordPress, affecting versions 2.0.6.0 prior to 2.1.1.3. The issue arises from a missing capability check on the stocktend_object endpoint, which allows unauthenticated attackers to invoke the save_object_as_user() function for objects with a '_datatype' of 'users'. This exploitation enables the attacker to write arbitrary strings into the user's wp_capabilities meta field, potentially elevating the privileges of an existing user account or a newly created one to that of an administrator.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain administrative rights on the WordPress site.