SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.7.3 - Authenticated (Shop Worker+) Privilege Escalation

Description

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.2. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for authenticated attackers, with shop worker-level access and above, to elevate their privileges beyond those intended for their role.