Administrator escalation via unchecked user meta writes

Privilege escalation in eleven ThemeGlow WordPress plugins allows remote authenticated users to grant themselves Administrator access. The iv_directories_update_profile_setting AJAX handler passes attacker-controlled fields to update_user_meta without authorization or key restrictions; Final User similarly accepts a requested user_role. A self-registered plugin account is sufficient, even when standard WordPress registration is disabled, and the resulting Administrator role grants full site control.