WordPress Shared Files Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WordPress Shared Files plugin, specifically in versions through 1.7.19. This vulnerability allows unauthenticated users to perform actions that require higher privileges, due to missing authorization checks.

Impact

Exploitation of this vulnerability could allow unauthorized users to execute actions with elevated privileges, potentially leading to unauthorized changes or access within the application.

Remediation

Users of the WordPress Shared Files plugin should update to version 1.7.20 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.