AffiliateWP RewardsWP Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the AffiliateWP RewardsWP plugin, specifically in versions through 1.0.4. This vulnerability allows users to gain higher privileges than intended, potentially leading to unauthorized access or control over certain features or data.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining access to higher-level permissions and potentially full control over the website.

Remediation

Users of the AffiliateWP RewardsWP plugin should update to version 1.0.5 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.