Rw Elephant Rental Inventory
Monthly
Missing authorization in the RW Elephant Rental Inventory plugin for WordPress (all versions up to and including 2.3.13) lets an authenticated attacker with only Subscriber-level access flip the plugin's cache setting on or off by sending a single POST of the toggle_cache action to /wp-admin/admin-ajax.php. The AJAX handler performs neither a capability check nor a nonce check, so the same endpoint can additionally be driven by cross-site request forgery against a higher-privileged logged-in user. The impact is confined to a low-integrity configuration change (no confidentiality or availability effect), no public exploit code has been identified at time of analysis, and the assessed CVSS 4.3 reflects a genuinely low-severity issue.
Missing authorization in the RW Elephant Rental Inventory plugin for WordPress (all versions up to and including 2.3.13) lets an authenticated attacker with only Subscriber-level access flip the plugin's cache setting on or off by sending a single POST of the toggle_cache action to /wp-admin/admin-ajax.php. The AJAX handler performs neither a capability check nor a nonce check, so the same endpoint can additionally be driven by cross-site request forgery against a higher-privileged logged-in user. The impact is confined to a low-integrity configuration change (no confidentiality or availability effect), no public exploit code has been identified at time of analysis, and the assessed CVSS 4.3 reflects a genuinely low-severity issue.