Unauthenticated Administrator Role Creation in User Rights Access Manager WordPress Plugin

Executive Summary

This vulnerability is an unauthenticated privilege escalation flaw in the User Rights Access Manager WordPress plugin version 1.1.3 or below. It allows attackers to register an administrator-equivalent account by exploiting an unrestricted AJAX account-registration handler that assigns a copied administrator role to new accounts.

Useful 0 Not Useful 0

Detection Guidance

Check if the User Rights Access Manager plugin version 1.1.3 or below is installed. Look for unauthorized administrator-equivalent accounts in WordPress user management.

Useful 0 Not Useful 0

Impact Analysis

An attacker can exploit this to register an administrator account without authentication, gaining full control over the WordPress site. This includes modifying content, installing malicious plugins, stealing data, or defacing the site.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated attackers to register administrator-equivalent accounts, enabling full site takeover. Such unauthorized access could lead to unauthorized processing or exposure of sensitive data, violating GDPR and HIPAA compliance requirements for data protection and access controls.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately deactivate and remove the User Rights Access Manager plugin if installed. Review WordPress user accounts for any unauthorized administrator-equivalent accounts and remove them.

Useful 0 Not Useful 0