High-Risk Privilege Escalation Vulnerability in WordPress Plugin

• •Vulnerability allows privilege escalation to Administrator for specific user roles.
• •Affected versions include all up to 2.5.11 of the WordPress plugin.
• •No current exploitation reported, but risk remains high without mitigation.

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to and including 2.5.11. This vulnerability arises from a non-atomic multi-option write sequence in the `ACUI_Cron::save_settings()` function, allowing authenticated attackers with specific delegated roles to escalate their privileges to Administrator. The attack requires a prior administrator cron-tab save and a specific timing window for exploitation. Current reports indicate no, but the risk remains high due to the potential for unauthorized administrative control over the site. Affected sites include those using user/customer CSV imports, particularly with scheduled imports and custom roles. Administrators are advised to review authentication logs, cron configurations, and user records for unusual activity. Prompt action is recommended due to the high impact of potential exploitation.