Zegen Church WordPress Theme Missing Authorization Vulnerability in AJAX Endpoints
Vulnerability
A vulnerability exists in the Zegen - Church WordPress Theme, all versions through 1.1.9, due to a lack of proper capability checks on several AJAX endpoints. This flaw allows authenticated attackers with Subscriber-level access and above to import, export, and modify theme options, thereby potentially disrupting the site's appearance or functionality.
Impact
Exploitation of this vulnerability could lead to unauthorized changes in theme options, allowing attackers to alter the site's appearance or behavior.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected theme.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.