App Builder – Create Native Android & iOS Apps On The Flight <= 5.5.10 - Unauthenticated Privilege Escalation via 'role' Parameter

An attacker exploiting this vulnerability can register a new WordPress user account and directly assign themselves the 'wcfm_vendor' role without undergoing the standard WCFM Marketplace vendor approval workflow. This grants them unauthorized access to vendor-specific functionalities and potentially sensitive data within the WordPress site. The attacker could then manipulate product listings, access order information, or perform other actions typically restricted to approved vendors. The blast radius extends to any WordPress site utilizing the vulnerable plugin, potentially impacting e-commerce operations and data integrity.

1. Reserviert2026-02-11
2. Veröffentlicht2026-03-21
3. Geändert2026-04-08
4. EPSS aktualisiert2026-03-28

The primary mitigation is to upgrade the App Builder plugin to a version containing the fix. If immediate upgrade is not feasible due to compatibility issues or breaking changes, consider temporarily restricting user registration to prevent new 'wcfmvendor' role assignments. Implement stricter role-based access controls within the WCFM Marketplace plugin to limit the impact of a compromised vendor account. Review existing user accounts for suspicious 'wcfmvendor' assignments. After upgrading, verify the fix by attempting to register a new user and confirming that the 'wcfm_vendor' role is not directly assigned without approval.

Aktive Installationen

800

Plugin-Bewertung