Spider Themes EazyDocs Missing Authorization Vulnerability Allowing Access Control Exploitation

A missing authorization vulnerability has been identified in the Spider Themes EazyDocs WordPress plugin, specifically in versions through 2.6.4. This vulnerability allows users to exploit improperly configured access control security levels, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could result in broken access control, allowing users to perform actions or access resources that should be restricted.

Remediation

Users are advised to update to EazyDocs version 2.6.6 or later. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability.