Automattic Jetpack Debug Tools Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the Automattic Jetpack Debug Tools plugin, affecting versions prior to 2.0.1. This vulnerability allows unauthenticated users to perform actions that require higher privileges, due to a lack of proper authorization checks.

Impact

Exploitation of this vulnerability could allow an unauthenticated user to access or modify data or perform actions on behalf of a user with higher privileges, potentially leading to unauthorized changes or access within the application.

Remediation

Users of the Jetpack Debug Tools plugin should update to version 2.0.1 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.