Shapely Companion <= 1.2.6 - Unprotected AJAX Action to Content Import
2022-05-24 00:00
AnonymousStrategic Overview
Vulnerability Overview
The Shapely Companion plugin for WordPress is vulnerable to arbitrary content import due to missing authorization checks on the shapely_companion_import_content() function called via an AJAX action in versions up to, and including 1.2.6. This makes it possible for authenticated users with subscriber level permissions and above to execute the AJAX action and trigger a content import.
Technical Analysis
REMEDIATION: Update to version 1.2.7, or a newer patched version --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C