WordPress BookPress for Book Authors Missing Authorization Vulnerability Allowing Access Control Exploitation

A missing authorization vulnerability has been identified in the WordPress BookPress – For Book Authors plugin, specifically in versions through 1.2.7. This vulnerability allows unauthorized users to exploit improperly configured access control security levels, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could allow an unauthorized user to perform actions or access resources that are normally restricted, due to the broken access control.

Remediation

Users of the BookPress – For Book Authors plugin are advised to update to the latest version. Patchstack has issued a virtual patch that automatically mitigates this vulnerability by blocking attacks until an official fix is available.