ConveyThis WordPress Plugin Missing Authorization Vulnerability Allowing Access Control Bypass
Vulnerability
A missing authorization vulnerability has been identified in the ConveyThis WordPress plugin, specifically in versions through 269.5. This vulnerability arises from incorrectly configured access control security levels, allowing unprivileged users to perform actions reserved for higher privileges.
Impact
Exploitation of this vulnerability could lead to unauthorized users gaining access to functions or features that require higher privileges, potentially allowing them to perform restricted actions or modify sensitive information.
Remediation
Users of the ConveyThis WordPress plugin are advised to upgrade to the latest version. For those seeking immediate protection, Patchstack offers a mitigation rule that can be applied until an official patch is available.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.