Ecwid by Lightspeed Ecommerce Shopping Cart Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress, affecting all versions through 7.0.7. The issue arises from a missing capability check in the 'save_custom_user_profile_fields' function, allowing authenticated attackers with minimal permissions, such as subscribers, to manipulate the 'ec_store_admin_access' parameter during profile updates. This exploitation grants them unauthorized access to the store manager role on the site.

Impact

Exploitation of this vulnerability allows authenticated users with subscriber-level permissions to escalate their privileges to that of a store manager, gaining access to additional administrative capabilities within the WordPress site.

Remediation

Users are advised to update the Ecwid by Lightspeed Ecommerce Shopping Cart plugin to version 7.0.8 or a newer patched version.