WordPress Lawyer Directory Plugin Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability has been identified in the WordPress Lawyer Directory plugin, specifically in versions through 1.3.3. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control of the website if high-level privileges are obtained.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and potentially full control over the website.

Remediation

Users of the WordPress Lawyer Directory plugin should update to version 1.3.4 or later. Patchstack users can enable auto-update for vulnerable plugins.

Added: Jan 22, 2026, 5:59 PM
Updated: Jan 22, 2026, 5:59 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
7.5
exploitability
5.4
remediation
7.9
relevance
2.3
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.