Atarim WordPress Plugin Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the Atarim WordPress plugin, specifically in versions through 4.0.9. This vulnerability allows for arbitrary content deletion, as it exploits incorrectly configured access control security levels. An unauthenticated user could potentially delete various types of content from a website, including posts, pages, and media such as images.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content from the affected WordPress site, including posts, pages, and media files.

Remediation

Users of the Atarim WordPress plugin should update to version 4.1.0 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.