Privilege Escalation in MemberPress Corporate Accounts Plugin

Executive Summary

This vulnerability is a privilege escalation flaw in the MemberPress Corporate Accounts WordPress plugin up to version 1.5.39. It allows authenticated attackers with subscriber-level access to escalate privileges by creating new admin accounts or hijacking existing ones through a mass assignment vulnerability in the 'add_sub_account_user' function.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if you are running MemberPress Corporate Accounts plugin version 1.5.39 or earlier. Inspect WordPress user accounts for unauthorized administrator accounts or modified email addresses. Review server logs for suspicious user creation events via the 'add_sub_account_user' function.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain full administrative control of a WordPress site using MemberPress Corporate Accounts. This could lead to site takeover, data theft, unauthorized content changes, or installation of malicious plugins. The attack requires only subscriber-level access and a corporate account.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules. Organizations may face fines, legal liabilities, and reputational damage if user data is compromised due to this flaw.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the MemberPress Corporate Accounts plugin to version 1.6.0 or later. Remove any unauthorized administrator accounts. Audit all user accounts for suspicious changes. Ensure strong access controls are in place for corporate sub-accounts.

Useful 0 Not Useful 0