{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/codestar/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:codestar:product_gallery_slider_\u0026_additional_variation_images_for_woocommerce:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-120318"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Product Gallery Slider \u0026 Additional Variation Images for WooCommerce (\u003c 2.3.26)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Codestar"],"content_html":"\u003cp\u003eThe Product Gallery Slider \u0026amp; Additional Variation Images for WooCommerce plugin (versions prior to 2.3.26) contains a missing authorization vulnerability in the Codestar framework (CSF) component. Authenticated users with the Shop Manager role can access specific AJAX actions (\u003ccode\u003ecsf-export\u003c/code\u003e, \u003ccode\u003ecsf-import\u003c/code\u003e, \u003ccode\u003ecsf-reset\u003c/code\u003e). By obtaining the \u003ccode\u003ecsf_backup_nonce\u003c/code\u003e from the settings page, these users can interact with these actions to manipulate arbitrary WordPress options. An attacker can overwrite the \u003ccode\u003ewp_user_roles\u003c/code\u003e option, effectively granting themselves administrative privileges.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a Shop Manager to escalate their privileges to administrator. This provides full control over the WordPress instance, including the ability to install plugins, modify site content, and access sensitive database information.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the \u0026quot;Product Gallery Slider \u0026amp; Additional Variation Images for WooCommerce\u0026quot; plugin to version 2.3.26 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit WordPress user roles to identify any accounts with unexpected administrative permissions.\u003c/li\u003e\n\u003cli\u003eAudit WordPress site options for unauthorized modifications, particularly the \u003ccode\u003ewp_user_roles\u003c/code\u003e option.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-02T15:48:22Z","date_published":"2026-11-02T15:48:22Z","id":"https://feed.craftedsignal.io/briefs/2026-11-woocommerce-plugin-privilege-escalation/","summary":"An improper authorization vulnerability in the Codestar framework integration within the Product Gallery Slider \u0026 Additional Variation Images for WooCommerce plugin allows Shop Managers to escalate privileges to administrator via arbitrary WordPress option modification.","title":"Product Gallery Slider \u0026 Additional Variation Images for WooCommerce: Privilege Escalation (CVE-2026-120318)","url":"https://feed.craftedsignal.io/briefs/2026-11-woocommerce-plugin-privilege-escalation/"}],"language":"en","title":"CraftedSignal Threat Feed - Codestar","version":"https://jsonfeed.org/version/1.1"}