Sovica Target Video Easy Publish Missing Authorization Vulnerability Allowing Arbitrary Code Execution

A missing authorization vulnerability has been identified in the Sovica Target Video Easy Publish plugin, affecting versions through 3.8.8. This vulnerability allows for arbitrary code execution, enabling malicious actors to execute unauthorized code on the affected site.

Impact

Exploitation of this vulnerability could lead to unauthorized arbitrary code execution on the affected WordPress site.

Remediation

Patchstack has issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix is available. WordPress site owners can apply this virtual patch through Patchstack.