WordPress Shown Connector Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the WordPress Shown Connector plugin, specifically in versions through 1.2.10. This vulnerability allows for the exploitation of incorrectly configured access control security levels, potentially leading to unauthorized changes in settings.

Impact

Exploitation of this vulnerability could result in unauthorized access to settings, allowing attackers to make changes that could affect the functionality or security of the WordPress site.

Remediation

Users are advised to immediately mitigate this vulnerability. Patchstack has issued a mitigation rule to block any attacks until an official fix becomes available. For more information on how to apply this mitigation, visit the Patchstack website.