Skip to content
Threat Feed
Subscribe

Product

PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus (<= 2.50.0)

1 brief RSS
high advisory

Privilege Escalation in PublishPress Capabilities Plugin

The PublishPress Capabilities WordPress plugin (<= 2.50.0) contains a privilege escalation vulnerability that automatically grants 'Editor' users full site-wide capability management permissions without administrative consent.

PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus wordpress privilege-escalation web-application
1t 1c