David Cramer My Shortcodes Plugin Broken Access Control Vulnerability

A missing authorization vulnerability has been identified in the David Cramer My Shortcodes WordPress plugin, affecting versions through 2.3. This vulnerability arises from improperly configured access control security levels, which could allow an unprivileged user to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to functions or data that require higher privileges, potentially allowing them to perform restricted actions or modify sensitive information.

Remediation

Users of the My Shortcodes WordPress plugin are advised to update to version 2.3 or later. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.