ID:3016 - Exploit for Permissions, Privileges, and Access Controls in bbPress - CVE-2020-13693

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions when new user registration is enabled, which leads to security restrictions bypass and privilege escalation.

Remediation