WordPress Advanced AJAX Product Filters Plugin Broken Access Control Vulnerability Advisory

Vulnerability Overview Vulnerability Name: Broken Access Control vulnerability in WordPress Advanced AJAX Product Filters Plugin <= 1.6.3 Vulnerability Type: Broken Access Control CVSS Score: 5.4 Priority: Low Priority Affected Scope Affected Versions: <= 1.6.3 Fixed Versions: 1.6.4 Remediation Recommended Action: Update to version 1.6.4 or later to resolve the vulnerability. Additional Recommendation: If an immediate update is not possible, contact your hosting provider or web developer for assistance. Details Software: Advanced AJAX Product Filters Type: Plugin Vulnerable Versions: <= 1.6.3 Fixed Versions: 1.6.4 Timeline Disclosure Date: December 1, 2022 Reporter: István Márton Additional Information Publication Date: July 12, 2023 Publisher: Patchstack Supplementary Notes Vulnerability Description: A Broken Access Control issue refers to the lack of authorization, authentication, or nonce token checks, which may allow unauthorized users to perform actions with higher privileges. Risk Level: Low risk; unlikely to be exploited. Subscription Subscription Content: Weekly WordPress Security Intelligence Subscription Method: Enter your email address and click the Subscribe button. Footer Information Copyright: © 2023 Patchstack Links: DPA, Privacy Policy, Accessibility, Terms & Conditions Navigation Bar Links: Pricing, Case studies, Login, Start trial Advertisement Ad Content: Get the fastest vulnerability mitigation by clicking the "Get started" button. Footer Links Vulnerability mitigation: Pricing, Application security (SCA), RapidMitigate, Threat Intelligence (API), VS Monars, VS Imunify360, VS Wordfence, Documentation, Service status, Log in Code security: Managed VDP, Active VDP directory, Security auditing, Compliance (CRA), Log in Bug bounty: Bug bounty, Leaderboard, Guidelines, Learn, Report, Discord, Log in Use cases: Web developers, Webhosts, Software vendors, WordPress, WooCommerce Resources: Partners, Vulnerability database, Whitepaper 2020, Articles, Case studies, Webinars, Vulnerability statistics Patchstack: About, Careers, Merch store, Media kit, Facebook, LinkedIn, X, Report Vulnerability Summary This vulnerability is a Broken Access Control issue in the WordPress Advanced AJAX Product Filters plugin, affecting versions <= 1.6.3. It is recommended to update to version 1.6.4 or later to remediate the issue.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Advanced AJAX Product Filters Plugin Broken Access Control Vulnerability Advisory

More from this source