NotFound Fresh Framework Missing Authorization Vulnerability Allowing Unrestricted Access to Functionality

A missing authorization vulnerability has been identified in the NotFound Fresh Framework, specifically in versions through 1.70.0. This vulnerability allows users to access functionality that is not properly restricted by access control lists (ACLs), potentially leading to unauthorized actions or data exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to restricted functionality, allowing users to perform actions or access data that should be protected by access controls.

Remediation

Users are advised to update to a version of the Fresh Framework plugin for WordPress that is later than 1.70.0. Patchstack has issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix is available.