RelyWP Coupon Affiliates Plugin Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the RelyWP Coupon Affiliates WordPress plugin, affecting versions through 6.4.0. This vulnerability allows for exploitation of incorrectly configured access control security levels, potentially leading to unauthorized changes in settings.

Impact

Exploitation of this vulnerability could result in unauthorized changes to plugin settings, disrupting normal functionality or user experience.

Remediation

Users of the RelyWP Coupon Affiliates WordPress plugin should update to version 6.4.2 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.