Team Members Showcase Plugin Missing Authorization Vulnerability in WordPress

A vulnerability exists in the Team – Team Members Showcase Plugin for WordPress, in all versions through 4.4.9. The issue arises from a lack of proper capability checks in the response() function, allowing authenticated attackers with Subscriber-level access or higher to unauthorizedly modify the plugin's settings.

Impact

Exploitation of this vulnerability allows for unauthorized users with Subscriber-level access and above to update the plugin's settings, potentially leading to unauthorized changes in how team members are displayed or managed.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access or higher can send an AJAX request to the 'tlpTeamSettings' endpoint. The request must include a valid nonce to bypass the security check. Once the request is processed, the user can update the plugin's settings without proper authorization.

Remediation

Users are advised to update the Team Members Showcase Plugin to version 5.0.0 or later, where this vulnerability has been patched.