Search & Filter Pro WordPress Plugin Missing Authorization Vulnerability Allows Post Meta Access

A vulnerability exists in the Search & Filter Pro plugin for WordPress, in all versions through 2.5.19. The issue arises from a missing capability check in the 'get_meta_values' function, allowing authenticated attackers with Subscriber-level access and above to access arbitrary post meta values. This unauthorized data access could lead to exposure of sensitive information.

Impact

Exploitation of this vulnerability allows for unauthorized access to post meta data and taxonomy data, potentially leading to exposure of sensitive information.

Remediation

Users are advised to update the Search & Filter Pro plugin to version 2.5.20 or a newer patched version.