Password Policy Manager WordPress Plugin Missing Authorization Vulnerability in AJAX Endpoint

A vulnerability exists in the Password Policy Manager | Password Manager plugin for WordPress, in all versions through 2.0.5. The issue arises from a missing capability check on the 'moppm_ajax' AJAX endpoint, allowing authenticated attackers with Subscriber-level access and above to log out the site's connection to miniorange.

Impact

Exploitation of this vulnerability allows authenticated users to log out the site's connection to miniorange, potentially disrupting any password policy management or related functionalities provided by the service.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access or higher can send a request to the 'moppm_ajax' AJAX endpoint without the necessary capability check. This can be done by including a nonce for 'moppm-admin-action-nonce' and an option to log out the miniorange connection.

Remediation

Users are advised to update the Password Policy Manager | Password Manager plugin to version 2.0.6 or later.