CyberRota Analysis
AI-GeneratedThe Catch Themes Demo Import plugin for WordPress, up to version 3.3, is vulnerable due to a missing authorization check in the plugin activation process, allowing authenticated users with subscriber-level access or higher to install a hardcoded plugin from WordPress.org. This vulnerability could lead to unauthorized plugin installations, potentially compromising site integrity and security. WordPress site administrators and security teams should prioritize this issue to mitigate risks associated with unauthorized plugin installations.
Original NVD Description
The Catch Themes Demo Import plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.3. This is due to the catch_themes_demo_import_activate_plugin() function, hooked on admin_init when the activate_plugin GET parameter is present, calling Plugin_Upgrader::install() to download and install a plugin from WordPress.org before performing the current_user_can('activate_plugins') capability check. This makes it possible for authenticated attackers, with subscriber-level access and above, to install the hardcoded 'essential-content-types' plugin from the WordPress.