Media Library Assistant Missing Authorization Vulnerability Allows Taxonomy Modification

A vulnerability exists in the Media Library Assistant plugin for WordPress, affecting all versions through 3.33. The issue stems from a missing capability check in the 'mla_update_compat_fields_action()' function, which allows authenticated attackers with Subscriber-level access and above to unauthorizedly modify taxonomy terms on arbitrary attachments.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in attachment taxonomy terms, potentially disrupting content organization and management.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access or higher can use the 'mla_update_compat_fields_action' AJAX action to modify taxonomy terms on attachments. This can be done through the WordPress Media Manager, where the absence of proper authorization checks allows for these changes to be made without the necessary permissions.

Remediation

Users are advised to update the Media Library Assistant plugin to version 3.34 or later.