WP Table Builder WordPress Plugin Incorrect Authorization Vulnerability Allowing Arbitrary Table Creation

A vulnerability exists in the WP Table Builder plugin for WordPress, specifically in versions through 2.0.19. The issue arises from an incorrect authorization check in the save_table() function, allowing authenticated attackers with Subscriber-level access and above to create new wptb-table posts. This vulnerability enables unauthorized modification of data by exploiting the flawed authorization mechanism.

Impact

Exploitation of this vulnerability allows for unauthorized data modification, specifically by enabling the creation of arbitrary table posts within the WordPress site.

Remediation

Users can update to version 2.0.20 or a newer patched version to address this vulnerability.