WebCodingPlace Responsive Posts Carousel Pro Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the WebCodingPlace Responsive Posts Carousel Pro plugin, affecting versions through 15.1. This vulnerability arises from incorrectly configured access control security levels, allowing unprivileged users to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could enable an unprivileged user to execute actions that require higher privileges, due to the missing authorization checks in the plugin.

Remediation

Users are advised to update to a version of the WebCodingPlace Responsive Posts Carousel Pro plugin that is later than 15.1. For those using Patchstack, a mitigation rule has been issued to block attacks until an official patch is available.