Bytes Technolab Add Product Frontend for WooCommerce Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability exists in the Bytes Technolab Add Product Frontend for WooCommerce plugin, specifically in versions through 1.0.6. This vulnerability arises from improperly configured access control, allowing unauthorized deletion of content such as images, posts, or pages from affected websites.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content from the WordPress site, including posts, pages, or media files.

Remediation

Users of the Bytes Technolab Add Product Frontend for WooCommerce plugin are advised to update to the latest version. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.