WordPress Append Content Plugin Missing Authorization Vulnerability Allowing Cross-Site Request Forgery

A missing authorization vulnerability has been identified in the WordPress Append Content plugin, specifically in versions through 2.1.1. This vulnerability allows for cross-site request forgery (CSRF) attacks by exploiting incorrectly configured access control security levels.

Impact

Exploitation of this vulnerability could enable a malicious actor to force users with higher privileges to perform unintended actions, potentially leading to unauthorized changes in settings or content.

Remediation

Users are advised to remove and replace the WordPress Append Content plugin, as it is likely abandoned and will not receive further updates or fixes.