Dreamer Blog WordPress Theme Missing Capability Check Vulnerability Allowing Arbitrary Plugin Installation

A vulnerability exists in the Dreamer Blog WordPress theme, versions through 1.2, allowing arbitrary plugin installations. This issue arises from a missing capability check, which could be exploited by users with Subscriber roles or higher.

Impact

Exploitation of this vulnerability could lead to unauthorized installation of plugins, potentially allowing for malicious code execution or other harmful actions on the WordPress site.

Reproduction

To reproduce this vulnerability, send a POST request to 'wp-admin/admin-ajax.php' with the action 'install_act_plugin_custom'. Include a 'plugin' parameter with the name of the desired WordPress plugin, such as 'hello-dolly'. The request must be made with a valid 'wordpress_logged_in' cookie, indicating an authenticated user session.