DD Roles <= 4.1 - Authenticated (Subscriber+) Privilege Escalation

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

EntreBase Advisory: The DD Roles plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.

Read more about this vulnerability: https://www.wordfence.com/threat-intel/vulnerabilities/id/6001660c-4b18-473d-a07d-30e0f7af29d1?source=api-prod