Unauthorized Access Vulnerability in Lafka Multi Store Burger, Pizza & Food Delivery Theme

CVE-2024-13811

What is CVE-2024-13811?

The Lafka Multi Store Burger, Pizza & Food Delivery WooCommerce Theme for WordPress is susceptible to unauthorized access owing to an absent capability check on the 'lafka_import_lafka' AJAX actions. This vulnerability impacts all versions up to and including 4.5.7. It allows authenticated users, including those with only Subscriber-level access, to import demo data, potentially compromising the site's configuration and content.

References