CVE-2024-10800: WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajaxsavefields() function in all versions up to, and including, 16.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to add custom fields that can be updated and then use the checkandoverwritewporwoocommercefields function to update the wpcapabilities field to have administrator privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10800?
CVE-2024-10800 is classified as a medium severity vulnerability due to its impact on privilege escalation.
How do I fix CVE-2024-10800?
To fix CVE-2024-10800, update the User Extra Fields plugin to version 16.7 or later.
Who is affected by CVE-2024-10800?
Authenticated users with subscriber-level access are affected by CVE-2024-10800.
What version of the User Extra Fields plugin is vulnerable to CVE-2024-10800?
All versions up to and including 16.6 of the User Extra Fields plugin are vulnerable to CVE-2024-10800.
What type of attack does CVE-2024-10800 allow?
CVE-2024-10800 allows authenticated attackers to escalate their privileges due to a missing capability check.