Skip to content
Threat Feed
Subscribe

Product

Propovoice: All-in-One Client Management System

1 brief RSS
high advisory

Propovoice Plugin Privilege Escalation Vulnerability

An improper capability check in the Propovoice plugin for WordPress (<= 1.7.8) allows authenticated users with the 'ndpv_manager' role to escalate their privileges to administrator by exploiting the REST API's user creation function.

Propovoice: All-in-One Client Management System
1t 1c