{"id":"CVE-2026-77183","published":"2026-10-10T06:16:43.013","lastModified":"2026-10-13T13:29:12.567","description":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with FooSales Cashier-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://plugins.trac.wordpress.org/changeset/3719657/foosales/trunk/admin/class-foosales-rest-api.php","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3719657/foosales/trunk/admin/foosales-xmlrpc-functions.php","tags":[]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97097d41-1d78-4db0-8ee2-70a776bd99f2?source=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The FooSales POS plugin allows authenticated users with cashier-level access or higher to change any user's email address, including administrators. This privilege escalation flaw enables attackers to reset passwords and fully compromise target accounts.","exploitability":"Exploitation requires an authenticated attacker with cashier-level access or higher, making it moderately difficult but achievable through social engineering or compromised credentials.","blast_radius":"The vulnerability could allow attackers to gain administrative access across multiple user accounts, potentially leading to complete system compromise and data exfiltration.","remediation":"Upgrade to version 1.43.1 or later to address the privilege escalation vulnerability.","detection":"Monitor for unusual email address update requests in WordPress user management logs, particularly when updates are made by users with cashier-level permissions or higher.","tags":["privilege-escalation","account-takeover","wordpress"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:52:44.884Z"}}