Team 118GROUP Agent Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the Team 118GROUP Agent plugin for WordPress, affecting versions through 1.6.0. This vulnerability allows exploitation of improperly configured access control security levels, leading to unauthorized deletion of content such as images, posts, or pages.

Impact

Exploitation of this vulnerability could result in the unauthorized deletion of content from affected WordPress websites.

Remediation

Users of the Team 118GROUP Agent plugin are advised to update to version 1.6.0 or later. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.