Description
WordPress Plugin Jigoshop-Store Toolkit is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin Jigoshop-Store Toolkit version 1.3.8 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.9 or latest
References
http://www.pritect.net/blog/visser-labs-wordpress-plugins-multiple-vulnerabilities
https://wordpress.org/plugins/jigoshop-store-toolkit/changelog/
Related Vulnerabilities
WordPress Plugin WP Socializer-Simple & Easy Social Media Share Icons Cross-Site Scripting (2.4.2)
WordPress Plugin Persian Woocommerce SMS Cross-Site Scripting (3.3.2)
WordPress Plugin WooCommerce BuddyPress Integration Security Bypass (3.2.5)
GibbonEdu Deserialization of Untrusted Data Vulnerability (CVE-2024-24725)