Aurum WordPress and WooCommerce Shopping Theme Missing Authorization Vulnerability in Demo Content Import

A vulnerability exists in the Aurum WordPress and WooCommerce Shopping Theme, all versions through 4.0.2. The issue arises from a missing capability check in the 'lab_1cl_demo_install_package_content' function, allowing authenticated attackers with Subscriber-level access and above to overwrite existing content with demo content. This unauthorized data modification could lead to potential disruption or misrepresentation of the site's content.

Impact

Exploitation of this vulnerability allows for unauthorized overwriting of content with imported demo material, potentially disrupting the site's information integrity.

Remediation

Users are advised to update the theme to version 4.0.3 or a later patched version.