CVE-2025-4631
Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint
The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the save_object_as_user() function for objects whose '_datatype' is set to 'users',. This allows unauthenticated attackers to write arbitrary strings straight into the user’s wp_capabilities meta field, potentially elevating the privileges of an existing user account or a newly created one to that of an administrator.
| CWE | CWE-285 |
| Vendor | unitybusinesstechnology |
| Product | the e-commerce erp: purchasing, inventory, fulfillment, manufacturing, bom, accounting, sales analysis |
| Published | May 31, 2025 |
| Last Updated | Jun 2, 2025 |
Get instant alerts for unitybusinesstechnology the e-commerce erp: purchasing, inventory, fulfillment, manufacturing, bom, accounting, sales analysis
Be the first to know when new critical vulnerabilities affecting unitybusinesstechnology the e-commerce erp: purchasing, inventory, fulfillment, manufacturing, bom, accounting, sales analysis are published — delivered to Slack, Telegram or Discord.
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H