Codestar - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/codestar/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 15:48:22 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgProduct Gallery Slider & Additional Variation Images for WooCommerce: Privilege Escalation (CVE-2026-120318)https://feed.craftedsignal.io/briefs/2026-11-woocommerce-plugin-privilege-escalation/Mon, 02 Nov 2026 15:48:22 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-woocommerce-plugin-privilege-escalation/An improper authorization vulnerability in the Codestar framework integration within the Product Gallery Slider & Additional Variation Images for WooCommerce plugin allows Shop Managers to escalate privileges to administrator via arbitrary WordPress option modification.The Product Gallery Slider & Additional Variation Images for WooCommerce plugin (versions prior to 2.3.26) contains a missing authorization vulnerability in the Codestar framework (CSF) component. Authenticated users with the Shop Manager role can access specific AJAX actions (csf-export, csf-import, csf-reset). By obtaining the csf_backup_nonce from the settings page, these users can interact with these actions to manipulate arbitrary WordPress options. An attacker can overwrite the wp_user_roles option, effectively granting themselves administrative privileges.

Impact

Successful exploitation allows a Shop Manager to escalate their privileges to administrator. This provides full control over the WordPress instance, including the ability to install plugins, modify site content, and access sensitive database information.

Recommendation

  • Update the "Product Gallery Slider & Additional Variation Images for WooCommerce" plugin to version 2.3.26 or later immediately.
  • Audit WordPress user roles to identify any accounts with unexpected administrative permissions.
  • Audit WordPress site options for unauthorized modifications, particularly the wp_user_roles option.
]]>highadvisory