WPDeveloper Addresses Privilege Escalation Vulnerability in ReviewX WordPress Plugin

On May 20, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a Privilege Escalation vulnerability in WPDeveloper’s ReviewX plugin, which is actively installed on more than 10,000 WordPress websites. This vulnerability makes it possible for an authenticated attacker to grant themselves administrative privileges via a user meta update. Wordfence ...
Read More

The post WPDeveloper Addresses Privilege Escalation Vulnerability in ReviewX WordPress Plugin appeared first on Wordfence.

addresses administrative privileges disclosure escalation grant intelligence may plugin privilege privilege escalation privileges process research responsible responsible disclosure team threat threat intelligence vulnerabilities vulnerability websites wordfence wordpress wordpress plugin wordpress security