Puzzles WordPress Theme Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Puzzles WordPress Theme, specifically in the WP Magazine/Review with Store version, through 4.2.4. The issue arises from a missing capability check on the 'theme_options_ajax_post_action' AJAX action, allowing authenticated attackers with Subscriber-level access and above to manipulate the plugin's settings and inject malicious scripts. The theme has been removed from the repository, and no update is available, prompting a recommendation to find a replacement.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Users are advised to update to version 4.2.5 or a newer patched version.