Unity Business Technology The E-Commerce ERP Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WordPress plugin The E-Commerce ERP, specifically in versions through 2.1.1.3. This vulnerability allows low-privileged users to escalate their privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain higher privileges, with the potential to take full control of the website.

Remediation

Users of the affected WordPress plugin are advised to update to a version beyond 2.1.1.3. For immediate protection, Patchstack offers a virtual patch that blocks attacks targeting this vulnerability.