WP Email Debug Privilege Escalation Vulnerability Allowing Unauthenticated Access to Administrator Accounts

A privilege escalation vulnerability has been identified in the WP Email Debug plugin for WordPress, affecting versions 1.0 through 1.1.0. The issue arises from a missing capability check in the WPMDBUG_handle_settings() function, allowing unauthenticated attackers to enable debugging, redirect all emails to an attacker-controlled address, and trigger a password reset for an administrator, potentially leading to unauthorized access to the administrator account.

Impact

Exploitation of this vulnerability could result in unauthorized access to an administrator account on the WordPress site.