Gnuget MF Plus WPML Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the Gnuget MF Plus WPML WordPress plugin, affecting versions through 1.1. This vulnerability allows for exploitation of improperly configured access control security levels, potentially leading to unauthorized changes in settings.

Impact

Exploitation of this vulnerability could result in unauthorized changes to plugin settings, allowing attackers to manipulate configurations without proper authorization.

Remediation

Users of the Gnuget MF Plus WPML WordPress plugin are advised to update to the latest version. For those unable to update immediately, Patchstack has issued a virtual patch that blocks attacks targeting this vulnerability.