The SureCart WordPress plugin contains a high-severity privilege management vulnerability that allows low-privileged subscribers to hijack administrator accounts.

This is an improper privilege management vulnerability occurring because the plugin fails to perform adequate authorization checks when updating customer records. Any authenticated user with a subscriber-level account can exploit this flaw to modify email addresses and associate customer records with arbitrary users, facilitating account takeover via password reset.

The ability for a standard subscriber to escalate privileges to an administrator represents a critical threat to the integrity and confidentiality of the WordPress installation. Successful exploitation allows an attacker to gain full control over the site, leading to potential data theft, unauthorized content modification, or complete system compromise. With a CVSS score of 8.8, this vulnerability is categorized as high severity and requires immediate attention to prevent unauthorized administrative access.

Immediate Action: Update the SureCart WordPress plugin to version 4.6.3 or later immediately to resolve the improper permission checks.

Proactive Monitoring: Audit user account modifications and administrative activity logs for anomalous changes to account emails or suspicious privilege escalations.

Compensating Controls: Deploy a Web Application Firewall with rules configured to detect and block suspicious requests targeting account update endpoints if the patch cannot be applied instantly.

Public Exploit Available: Unknown

Given the severity of this privilege management flaw, organizations using the SureCart plugin must prioritize updating to version 4.6.3. The potential for unauthorized administrative account takeover creates a significant security risk that outweighs the effort of applying the vendor-supplied patch. Ensure all administrative credentials are audited for signs of compromise following the update.