WordPress Payment Gateway Authorize.Net CIM for WooCommerce Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the WordPress Payment Gateway Authorize.Net CIM for WooCommerce plugin, specifically in versions through 2.1.2. This vulnerability arises from incorrectly configured access control security levels, allowing unauthorized deletion of content such as images, posts, or pages.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content from the affected WordPress site, including posts, pages, or media files.

Remediation

Patchstack has issued a mitigation rule to block attacks targeting this vulnerability. Users can activate this mitigation through the Patchstack service.