Description
WordPress Plugin Extra User Details is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin Extra User Details version 0.4.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 0.4.2.1 or latest
References
http://pvagenas.com/vulnerabilities/extra-user-details-privilege-escalation/
https://www.exploit-db.com/exploits/39489/
Related Vulnerabilities
Three.js Uncontrolled Resource Consumption Vulnerability (CVE-2020-28496)
Apache HTTP Server Use After Free Vulnerability (CVE-2019-10082)
WordPress Plugin Bulk Delete Privilege Escalation (5.5.3)
WordPress Plugin iThemes Sync Security Bypass (2.0.17)
OpenSSL Improper Authentication Vulnerability (CVE-2009-1390)