WP Headless CMS Framework Protection Mechanism Bypass Vulnerability

A protection mechanism bypass vulnerability has been identified in the WP Headless CMS Framework plugin for WordPress, affecting all versions through 1.15. The vulnerability arises because the plugin only verifies the presence of the Authorization header when deciding whether to bypass nonce protection. This oversight allows unauthenticated attackers to access restricted content.

Impact

Exploitation of this vulnerability could lead to unauthorized access to content that should be restricted.

Remediation

There is no known patch available for this vulnerability. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.