EazyPlugins Eazy Plugin Manager Broken Access Control Vulnerability

A missing authorization vulnerability has been identified in EazyPlugins Eazy Plugin Manager versions through 4.3.0. This vulnerability allows exploitation of improperly configured access control security levels, potentially leading to unauthorized actions by users with lower privileges.

Impact

Exploitation of this vulnerability could allow users to perform actions or access resources that are normally restricted, due to the broken access control.

Remediation

Users are advised to update to a version of Eazy Plugin Manager that is later than 4.3.0. For those using WordPress, Patchstack offers a virtual patch that can be applied immediately to mitigate this vulnerability.