WordPress Project Cost Calculator Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WordPress Project Cost Calculator plugin, affecting versions through 1.0.0. This vulnerability arises from missing authorization checks, allowing users to exploit improperly configured access control levels and perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could allow users to bypass authorization and access control measures, potentially leading to unauthorized actions or changes within the application.

Remediation

Users are advised to update to a version of the Project Cost Calculator plugin later than 1.0.0, if available. If no update is possible, consider using the Patchstack vPatch service to automatically mitigate this vulnerability.