Description
The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.5. This allows unauthenticated attackers to create arbitrary malicious administrator accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jack Hopman | WPGateway | ≤ 3.5 | — |