EIP-2026-113732
PRE-CVEWordPress Plugin Extra User Details 0.4.2 - Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113732. PoCs published by Panagiotis Vagenas.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in the Extra User Details WordPress plugin (v0.4.2). It leverages improper capability checks in the `eud_update_ExtraFields` function to update user meta data, allowing an attacker to escalate their privileges to administrator by manipulating the `wp_capabilities` field.
Description
WordPress Plugin Extra User Details 0.4.2 - Privilege Escalation
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in the Extra User Details WordPress plugin (v0.4.2). It leverages improper capability checks in the `eud_update_ExtraFields` function to update user meta data, allowing an attacker to escalate their privileges to administrator by manipulating the `wp_capabilities` field.