CVE-2024-12129: Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update
The Royal Core plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'royalrestorebackup' function in all versions up to, and including, 2.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12129?
CVE-2024-12129 is rated as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2024-12129?
To fix CVE-2024-12129, update the Royal Core plugin to version 2.9.3 or later.
What type of vulnerability is CVE-2024-12129?
CVE-2024-12129 is a data modification vulnerability that allows unauthorized access due to a missing capability check.
Who is affected by CVE-2024-12129?
Any user of the Royal Core plugin for WordPress versions up to and including 2.9.2 is affected by CVE-2024-12129.
What can attackers do with CVE-2024-12129?
Attackers can exploit CVE-2024-12129 to perform unauthorized data modifications and potentially escalate their privileges on affected WordPress sites.