Webraketen Internal Links Manager Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the Webraketen Internal Links Manager plugin for WordPress, affecting versions through 2.5.2. This vulnerability arises from missing authorization checks, which can be exploited by users with lower privileges to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability could allow users with subscriber privileges to access or modify resources or functionalities that should be restricted to users with higher privileges.

Remediation

Users of the Webraketen Internal Links Manager plugin should update to version 2.5.3 or later to address this vulnerability.