CozyStay WordPress Theme Missing Authorization Vulnerability in ajax_handler Function

A vulnerability exists in the CozyStay theme for WordPress, in all versions through 1.7.0, allowing unauthorized data modification. This issue arises from a lack of capability checks in the ajax_handler function, enabling unauthenticated attackers to perform arbitrary actions.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of actions, potentially allowing attackers to modify data or settings without proper authorization.

Remediation

Users are advised to update the CozyStay WordPress theme to version 1.7.1 or a newer patched version.