CVE-2024-9518

CRITICAL

UserPlus < 2.0 - Unauthenticated Privilege Escalation via Role Parameter

Title source: llm
STIX 2.1

Description

The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0050
EPSS Percentile 38.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (2)
userplus/User registration & user profile – UserPlus < 2.0
wpuserplus/userplus < 2.0
Published Oct 10, 2024
Tracked Since Feb 18, 2026