WordPress Dynamic Post Plugin Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the WordPress Dynamic Post plugin, affecting versions through 4.10. This vulnerability allows for exploitation of improperly configured access control security levels, potentially leading to unauthorized changes in settings.

Impact

Exploitation of this vulnerability could result in unauthorized changes to settings, due to the bypass of access control measures.

Remediation

Users can apply Patchstack's virtual patching service to mitigate this vulnerability, as no official patch is available.