Expire Users WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Expire Users plugin for WordPress, affecting all versions through 1.2.2. The vulnerability arises because the plugin allows users to modify the 'on_expire_default_to_role' meta via the 'save_extra_user_profile_fields' function. This flaw enables authenticated attackers with Subscriber-level access or higher to elevate their privileges to that of an administrator.

Impact

Exploitation of this vulnerability allows authenticated users with Subscriber-level access to gain administrative privileges on the WordPress site.