Security restrictions bypass in Convert Plus - #VU18639

Detailed vulnerability description

The vulnerability allows a remote attacker to gain administrative access to the website.

The vulnerability exists due to application uses the supplied user role during registration and assign it to the new account. A remote attacker can register with the vulnerable website and assign administrative privileges to himself during registration.

Successful exploitation of the vulnerability allows a remote attacker to gain full access to the affected website.

Remediation

Sources

• https://www.wordfence.com/blog/2019/05/critical-vulnerability-patched-in-popular-convert-plus-plugin...
• https://www.convertplug.com/plus/version-3-4-3-security-update/