Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-1874. PoCs published by thomas-osgood.
AI-analyzed exploit summary This repository contains a Python-based exploit for CVE-2023-1874, a privilege escalation vulnerability in the WP Data Access WordPress plugin. The exploit automates the process of logging in as a low-privileged user and escalating privileges by manipulating the `wpda_role[]` parameter during a profile update.
Description
The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. This is due to a lack of authorization checks on the multiple_roles_update function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wpda_role[]' parameter during a profile update. This requires the 'Enable role management' setting to be enabled for the site.
Exploits (1)
This repository contains a Python-based exploit for CVE-2023-1874, a privilege escalation vulnerability in the WP Data Access WordPress plugin. The exploit automates the process of logging in as a low-privileged user and escalating privileges by manipulating the `wpda_role[]` parameter during a profile update.
References (6)
Scores
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H