PARETO Digital Embedder for Google Reviews Broken Access Control Vulnerability

A broken access control vulnerability exists in the PARETO Digital Embedder for Google Reviews plugin, affecting versions through 1.7.3. This vulnerability allows users to access functionalities that are not properly restricted by access control lists (ACLs).

Impact

Exploitation of this vulnerability could enable an unprivileged user to perform actions that require higher privileges, due to the lack of proper authorization checks in the plugin.

Remediation

Users of the PARETO Digital Embedder for Google Reviews plugin should update to version 1.7.4 or later to address this vulnerability.