WordPress Internal Link Optimiser Missing Authorization Vulnerability Allowing Settings Change

A missing authorization vulnerability has been identified in the WordPress Internal Link Optimiser plugin, specifically in versions through 5.1.2. This vulnerability allows for exploitation of improperly configured access control security levels, potentially leading to unauthorized changes in plugin settings.

Impact

Exploitation of this vulnerability could result in unauthorized changes to the plugin's settings, allowing attackers to manipulate internal link optimization features without proper authorization.

Remediation

Users of the WordPress Internal Link Optimiser plugin should update to version 5.1.3 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.