Codedrafty Mediabay Missing Authorization Vulnerability Allowing Broken Access Control

A missing authorization vulnerability has been identified in the Codedrafty Mediabay WordPress plugin, affecting versions through 1.6. This vulnerability arises from incorrectly configured access control security levels, which can be exploited to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to functions or data meant for users with higher privileges.

Remediation

Users of the Codedrafty Mediabay WordPress plugin can apply a virtual patch available through Patchstack to mitigate this vulnerability. This virtual patch blocks attacks until an official fix can be tested and safely applied.