WP Bakery Autoresponder Addon Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the WP Bakery Autoresponder Addon, specifically in versions through 1.0.6. This vulnerability arises from incorrectly configured access control security levels, allowing unprivileged users to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to functions or data that require higher privileges, potentially allowing them to perform restricted actions or manipulate sensitive information.

Remediation

Users are advised to update to a version of the WP Bakery Autoresponder Addon that is later than 1.0.6. For those seeking immediate protection, Patchstack offers a mitigation service that can be activated to block potential exploitation of this vulnerability.