Blokhaus Minterpress Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the Blokhaus Minterpress WordPress plugin, affecting versions through 1.0.5. This vulnerability allows users to access functionalities that are not properly restricted by access control lists (ACLs), potentially leading to unauthorized deletion of content such as posts, pages, or media.

Impact

Exploitation of this vulnerability could result in the unauthorized deletion of content from a WordPress site, including posts, pages, or media files.

Remediation

Users of the Blokhaus Minterpress WordPress plugin are advised to update to the latest version. A virtual patch is also available through Patchstack to mitigate this vulnerability until an official fix can be applied.