CyberRota Analysis
AI-GeneratedThe Nelio Content plugin for WordPress is susceptible to an authorization bypass vulnerability, allowing authenticated users with contributor-level access or higher to delete any reusable social messages, including those created by administrators. This flaw poses a significant risk to content integrity and could lead to unauthorized data loss. WordPress site administrators and users of the Nelio Content plugin should prioritize applying updates or mitigating this vulnerability to safeguard their content.
Original NVD Description
The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to permanently delete any reusable social message (nc_reusable_social post), including those authored by administrators or other privileged users.