WordPress Comments Import and Export Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WordPress Comments Import and Export plugin, specifically in versions through 2.4.9. This vulnerability arises from missing authorization checks, allowing users with lower privileges to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to functions or data that should be restricted, potentially allowing for further actions that could compromise the site's security.

Remediation

Users of the WordPress Comments Import and Export plugin should update to version 2.5.0 or later. Patchstack users can enable auto-updates for vulnerable plugins.