WordPress Meta Tag Manager Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the WordPress Meta Tag Manager plugin, affecting versions through 3.1. This vulnerability allows unprivileged users to perform actions that require higher privileges, due to a lack of proper authorization checks.

Impact

Exploitation of this vulnerability could allow an unprivileged user to execute actions that require higher privileges, potentially leading to unauthorized changes or access within the WordPress site.

Remediation

Users of the WordPress Meta Tag Manager plugin should update to version 3.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.