Description
WordPress Plugin Alphabetic Pagination is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently update plugins's settings and allow registration with a default role of administrator. WordPress Plugin Alphabetic Pagination version 3.0.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.0.8 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:3D72B705-F1AB-4E20-AA2D-426B3151EEEA
https://plugins.svn.wordpress.org/alphabetic-pagination/trunk/readme.txt
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5304)
Atlassian Jira Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-39127)
Oracle Database Server CVE-2006-0291 Vulnerability (CVE-2006-0291)
Plone CMS Improper Privilege Management Vulnerability (CVE-2020-7941)
WordPress Plugin Media File Manager Advanced Multiple Vulnerabilities (1.1.5)