Find Unused Images WordPress Plugin Missing Authorization Vulnerability Allowing Unauthenticated Attachment Deletion

A vulnerability exists in the Find Unused Images plugin for WordPress, in versions through 1.0.7, due to a lack of proper capability checks. This flaw allows unauthenticated users to delete any site's attachments, leading to unauthorized data loss.

Impact

Exploitation of this vulnerability allows for arbitrary deletion of WordPress attachments, potentially leading to loss of important media or document files from the site.

Reproduction

The vulnerability can be reproduced by sending a request to the WordPress site with the 'wp_ajax_fui_delete_image' or 'wp_ajax_fui_delete_all_images' action. These requests can be made without authentication, and they will delete the specified images or all images, respectively.