GhostPool Gauge WordPress Theme Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the GhostPool Gauge WordPress theme, specifically in versions through 6.56.4. This vulnerability allows unprivileged users to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could allow unprivileged users to perform actions or access resources that should be restricted, due to the broken access control.

Remediation

Users of the GhostPool Gauge WordPress theme are advised to upgrade to a version later than 6.56.4. For those seeking immediate protection, Patchstack offers a mitigation rule that can be applied until an official patch is available.