Bit Apps Bit SMTP Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Bit Apps Bit SMTP WordPress plugin, affecting versions through 1.2.2. This vulnerability arises from incorrect privilege assignment, allowing lower-privileged users to perform actions reserved for higher-privileged users, potentially leading to unauthorized admin access.

Impact

Exploitation of this vulnerability could allow a malicious actor to gain administrative privileges on the affected WordPress site.

Remediation

Users of the Bit SMTP WordPress plugin should update to version 1.2.3 or later. Patchstack users can enable auto-updates for vulnerable plugins.