Wp Stateless
Monthly
Missing authorization in the WP-Stateless WordPress plugin (versions up to and including 4.4.1) allows authenticated subscriber-level users to modify plugin settings they should have no access to. WP-Stateless manages Google Cloud Storage offloading for WordPress media; unauthorized settings changes by a low-privileged user can corrupt the GCS integration, break media delivery, or reconfigure the storage bucket in ways that degrade site availability. No public exploit code has been identified at time of analysis, though the Patchstack advisory confirms the vulnerability.
The WP-Stateless - Google Cloud Storage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the dismiss_notices() function in all versions up to, and. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.
Missing authorization in the WP-Stateless WordPress plugin (versions up to and including 4.4.1) allows authenticated subscriber-level users to modify plugin settings they should have no access to. WP-Stateless manages Google Cloud Storage offloading for WordPress media; unauthorized settings changes by a low-privileged user can corrupt the GCS integration, break media delivery, or reconfigure the storage bucket in ways that degrade site availability. No public exploit code has been identified at time of analysis, though the Patchstack advisory confirms the vulnerability.
The WP-Stateless - Google Cloud Storage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the dismiss_notices() function in all versions up to, and. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.