SolaPlugins Sola Support Ticket Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the Sola Support Ticket plugin by SolaPlugins, affecting versions through 3.17. This vulnerability allows for the exploitation of improperly configured access control security levels, potentially leading to arbitrary content deletion on affected WordPress sites.

Impact

Exploitation of this vulnerability could result in the unauthorized deletion of content, such as posts, pages, or media, from the WordPress site.

Remediation

Users are advised to remove and replace the Sola Support Ticket plugin, as it is likely abandoned and will not receive further updates or fixes.