CVE-2020-36666

CVE-2020-36666 is a critical vulnerability affecting multiple WordPress plugins developed by e-plugins, including directory-pro, final-user-wp-frontend-user-profiles, and wp-membership. These plugins fail to implement security measures in certain AJAX calls, allowing authenticated users to manipulate user metadata. Specifically, a logged-in user can exploit this flaw to grant themselves administrative privileges, even on sites where user registration is typically restricted. The vulnerability carries a CVSS score of 8.8 (High), indicating a severe risk. Its attack vector is network-based with low attack complexity, requiring only low privileges and no user interaction. Successful exploitation can lead to complete compromise of confidentiality, integrity, and availability of the affected system. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness despite its high severity.