Voidek Employee Portal Missing Authorization Vulnerability

A vulnerability exists in the Voidek Employee Portal plugin for WordPress, all versions through 1.0.6, due to a lack of proper capability checks on several AJAX actions. This flaw allows unauthenticated users to gain unauthorized access and perform actions such as registering accounts, deleting users, and altering details within the employee portal.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed within the employee portal, including user account creation, user deletion, and modification of portal details.

Remediation

No known patch is available. It is recommended to review the vulnerability details thoroughly and consider uninstalling the affected plugin.