CVE-2024-7425

CVE-2024-7425 is a high-severity vulnerability affecting the WP ALL Export Pro plugin for WordPress, versions up to and including 1.9.1. It allows authenticated attackers with Shop Manager-level access or higher to modify arbitrary WordPress options due to improper input validation. This can be leveraged to enable user registration and set the default role to administrator, leading to full administrative access. The CVSS score is 7.2 (High), indicating a network-based attack with high impact on confidentiality, integrity, and availability, requiring high privileges but no user interaction. There is currently no known public exploit intelligence, active exploitation, or significant community discussion surrounding this vulnerability.