WPPOOL FlexTable Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WPPOOL FlexTable WordPress plugin, affecting versions through 3.24.0. This vulnerability arises from missing authorization checks, which can be exploited by users with lower privileges to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability could allow users with contributor privileges to bypass access controls and execute actions that require higher privileges.

Remediation

Users are advised to update the FlexTable plugin to the latest version. If an update is not possible, contact the hosting provider or web developer for assistance.