Metagauss RegistrationMagic Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Metagauss RegistrationMagic WordPress plugin, specifically in versions through 6.0.7.1. This vulnerability allows unauthorized users to gain access to actions and privileges that should be reserved for higher-level users, potentially leading to administrative access on the website.

Impact

Exploitation of this vulnerability could allow an attacker to gain administrative privileges on the affected WordPress site, enabling them to perform actions such as modifying content, managing users, and changing site settings.

Remediation

Users of the RegistrationMagic WordPress plugin should update to version 6.0.7.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.