WordPress EmbedPress Document Block Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the WordPress Document Block – Upload & Embed Docs plugin, affecting versions through 1.1.0. This vulnerability allows unprivileged users to perform actions that require higher privileges, due to a lack of proper authorization checks.

Impact

Exploitation of this vulnerability could allow an unprivileged user to execute actions that require higher privileges, potentially leading to unauthorized changes or access within the WordPress site.

Remediation

Users are advised to remove and replace this plugin, as it is likely abandoned and will not receive further updates or fixes.