Yulio Aleman Jimenez Smart Shopify Product Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the Yulio Aleman Jimenez Smart Shopify Product plugin, specifically in versions through 1.0.2. This vulnerability arises from incorrectly configured access control security levels, allowing unauthorized deletion of content such as images, posts, or pages from affected websites.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content from the website, including images, posts, or pages.

Remediation

Users are advised to update the Smart Shopify Product plugin to the latest version. If an update is not possible, contact the hosting provider or web developer for assistance.