Description
WordPress Plugin Jigoshop-Store Toolkit is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin Jigoshop-Store Toolkit version 1.3.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.8 or latest
References
Related Vulnerabilities
SharePoint CVE-2021-24104 Vulnerability (CVE-2021-24104)
WordPress Plugin Soundy Background Music Cross-Site Scripting (3.9)
WeBid Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7117)
Squid Insufficient Verification of Data Authenticity Vulnerability (CVE-2016-4554)
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2023-5869)