WordPress Vulnerability Alert: Privilege Escalation in Soledad Theme
A significant vulnerability has been discovered in the popular Soledad WordPress theme, which may allow unauthorized users to take control of site settings. This issue, identified by Denver Jackson from the Patchstack Alliance, affects versions 8.6.9 and below. It allows any logged-in user to alter critical site settings using a specific AJAX function without proper permission checks.
This weakness could enable a Subscriber-level user to change registration settings, potentially granting admin access to new users, leading to a complete site takeover.
To protect your site, it’s crucial to update the Soledad theme to version 8.6.9.1, where this vulnerability has been patched. The risk level is considered high, so prompt action is advised to ensure your website’s security.
Source: View Original Report
