Nirwp Team Nirweb Support Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the Nirweb Support plugin for WordPress, affecting versions through 3.0.3. This vulnerability allows unauthorized users to perform actions that require higher privileges, due to missing checks for authorization, authentication, or nonce tokens.

Impact

Exploitation of this vulnerability could allow an unprivileged user to execute actions reserved for users with higher privileges.

Remediation

Users are advised to remove and replace the Nirweb Support plugin, as it is likely abandoned and will not receive further updates or fixes.