EPC Photography WordPress Theme Broken Access Control Vulnerability

A missing authorization vulnerability has been identified in the EPC Photography WordPress theme, affecting versions through 7.5.2. This vulnerability allows unprivileged users to perform actions reserved for higher privileges, due to a lack of proper authorization checks.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functionalities or data, potentially allowing them to perform actions that should be limited to users with higher privileges.

Remediation

Users of the EPC Photography WordPress theme can apply a virtual patch provided by Patchstack, which blocks attacks targeting this vulnerability until an official fix is available.