WP Business Intelligence Lite Authorization Bypass Vulnerability Allowing Privilege Escalation via SQL Modification

A vulnerability exists in the WP Business Intelligence Lite plugin for WordPress, in all versions up to and including 3.2.0. The issue stems from the plugin's failure to properly verify user authorization for certain actions. This flaw enables authenticated attackers with Subscriber-level access or higher to alter stored SQL queries. Such modifications can be exploited to escalate privileges by executing arbitrary SQL when the altered query is accessed by an administrator.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation by allowing attackers to execute arbitrary SQL queries, potentially manipulating the database or affecting application behavior.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.