Matat Technologies TextMe SMS Plugin Missing Authorization Vulnerability Allowing Broken Access Control

A missing authorization vulnerability has been identified in the TextMe SMS plugin by Matat Technologies, affecting versions through 1.9.1. This vulnerability arises from incorrectly configured access control security levels, which can be exploited to perform actions without proper authorization.

Impact

Exploitation of this vulnerability could allow an unprivileged user to perform actions that require higher privileges, due to the broken access control.

Remediation

Users of the TextMe SMS plugin should update to version 1.9.2 or later. Patchstack users can enable auto-update for vulnerable plugins.