Ak Framework
Monthly
Privilege escalation in the Ak Framework WordPress plugin, bundled with the Newsy - Viral News & Magazine theme, through version 2.9.8 allows attackers to reach the ajax_refresh_nonce and ak_admin_ajax handlers and pass attacker-controlled option names and values into update_option(), including users_can_register and default_role. Setting those options to enable open registration with the administrator role gives an attacker a path to create an administrator account. The advisory describes the handlers as reachable without authentication, while the supplied CVSS vector specifies PR:L (authenticated), so the authentication prerequisite should be confirmed against the vendor advisory before scoping exposure; exploitation is limited to sites running this theme/plugin, and no public exploit code or CISA KEV entry appears in the supplied intelligence.
Privilege escalation in the Ak Framework WordPress plugin, bundled with the Newsy - Viral News & Magazine theme, through version 2.9.8 allows attackers to reach the ajax_refresh_nonce and ak_admin_ajax handlers and pass attacker-controlled option names and values into update_option(), including users_can_register and default_role. Setting those options to enable open registration with the administrator role gives an attacker a path to create an administrator account. The advisory describes the handlers as reachable without authentication, while the supplied CVSS vector specifies PR:L (authenticated), so the authentication prerequisite should be confirmed against the vendor advisory before scoping exposure; exploitation is limited to sites running this theme/plugin, and no public exploit code or CISA KEV entry appears in the supplied intelligence.