Jthemes xSmart WordPress Theme Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Jthemes xSmart WordPress theme, specifically in versions through 1.2.9.4. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and possibly full control over the WordPress site.

Remediation

Users are advised to update to a version of the xSmart theme that is later than 1.2.9.4. For those using Patchstack, a mitigation rule has been issued to block attacks targeting this vulnerability.