The Riaxe Product Customizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.2. The plugin registers an una…

The Riaxe Product Customizer WordPress plugin (versions up to 2.1.2) contains a critical privilege escalation vulnerability. An unauthenticated AJAX action 'wp_ajax_nopriv_install-imprint' maps to the ink_pd_add_option() function, which processes POST data without proper validation. The function reads 'option' and 'opt_value' parameters and calls delete_option() followed by add_option() without nonce verification, capability checks, or option name allowlisting. This allows unauthenticated attackers to modify arbitrary WordPress options, enabling privilege escalation by activating user registration and setting the default role to administrator.