Unauthorized Data Modification in WP Directory Kit Plugin for WordPress

CVE-2023-2351

Summary

The WP Directory Kit plugin for WordPress is susceptible to unauthorized data modifications due to a lack of adequate capability checks in the 'ajax_admin' function. This vulnerability allows authenticated attackers with subscriber-level permissions or higher to manipulate plugin settings, import demo content, delete posts and terms associated with the Directory Kit, and even install arbitrary plugins. Although a partial fix was introduced in version 1.2.0, users of earlier versions remain at risk of data loss and unauthorized actions.

References