CyberRota Analysis
AI-GeneratedThe MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings for WordPress versions prior to 7.0.4 lacks proper authorization and CSRF checks in an AJAX action, enabling any authenticated user, including subscribers, to access sensitive import log files and metadata of arbitrary posts. This vulnerability poses a risk of information disclosure, potentially exposing sensitive data to unauthorized users. WordPress site administrators using affected versions of this plugin should prioritize updating to version 7.0.4 or later to mitigate this risk.
Original NVD Description
The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4's import log file as well as import-related metadata belonging to arbitrary posts.