JoomUnited WP Table Manager Missing Authorization Vulnerability Allowing Access Control Exploitation

A missing authorization vulnerability has been identified in the JoomUnited WP Table Manager plugin for WordPress, affecting versions through 3.5.2. This vulnerability arises from broken access control, which allows users with lower privileges to perform actions reserved for higher-privileged users.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functionalities or data, potentially allowing them to perform actions that should be reserved for users with higher privileges.

Remediation

Users of the WP Table Manager plugin should update to version 3.5.3 or later. Patchstack users can enable auto-update for vulnerable plugins.