BeyondCart Connector Privilege Escalation Vulnerability
Vulnerability
A privilege escalation vulnerability has been identified in the BeyondCart Connector plugin for WordPress, affecting versions 1.4.2 through 2.1.0. The vulnerability arises from improper management of JSON Web Token (JWT) secrets and authorization within the determine_current_user filter. This flaw allows unauthenticated attackers to create valid tokens and impersonate any user.
Impact
Exploitation of this vulnerability allows for unauthorized users to assume the identities of other users, potentially leading to unauthorized actions or access within the application.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.