MarketKing WordPress Plugin Missing Authorization Exposes Vendor Data

Executive Summary

This vulnerability is a missing authorization issue in the MarketKing WordPress plugin before version 2.1.72. It allows authenticated attackers with subscriber-level access or higher to retrieve the complete vendor directory by sending a crafted AJAX request. The flaw exists because the plugin does not perform proper capability checks in the vendor management action.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your MarketKing WordPress plugin version is below 2.1.72. You can use commands like 'wp plugin list' in WordPress CLI or inspect the plugin version in the WordPress admin panel under Plugins.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to retrieve sensitive personally identifiable information of all registered vendors, including internal user IDs, usernames, and email addresses. This exposes private data to any logged-in user, regardless of their role, potentially leading to privacy breaches or further attacks.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates GDPR and HIPAA due to unauthorized access and exposure of personally identifiable information. GDPR requires strict protection of personal data, while HIPAA mandates safeguards for protected health information. Exploitation could result in non-compliance penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the MarketKing plugin to version 2.1.72 or later. If updating is not possible, consider disabling the plugin temporarily until an update is applied to prevent unauthorized access to vendor data.

Useful 0 Not Useful 0