Description
WordPress Plugin Jigoshop-Store Toolkit is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin Jigoshop-Store Toolkit version 1.3.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.8 or latest
References
Related Vulnerabilities
Oracle Database Server CVE-2010-2419 Vulnerability (CVE-2010-2419)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4522)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.28)
WordPress Plugin SH Slideshow 'ajax.php' SQL Injection (3.1.4)
WordPress Plugin Code Embed 'suffix' Parameter Cross-Site Scripting (2.0.1)