A critical vulnerability in the Solace Extra WordPress plugin allows authenticated users to perform unauthorized data deletion and site configuration changes.

The plugin fails to perform a capability check on the import_zip() function, which is reachable by any authenticated user, including those with Subscriber-level access. This allows attackers to trigger unauthorized actions such as wiping navigation menus, removing theme modifications, and clearing sidebar widgets.

Successful exploitation allows an attacker to cause significant service disruption and data loss by resetting core site settings and content. With a CVSS score of 9.1, this vulnerability poses a severe threat to site integrity, potentially leading to total loss of theme customization and site structure, which may require extensive manual restoration.

Immediate Action: Update the Solace Extra plugin to version 1.6.1 or later immediately.

Proactive Monitoring: Review WordPress access logs for suspicious requests targeting wp-ajax.php involving the import-zip action.

Compensating Controls: Utilize a Web Application Firewall to block unauthorized access to AJAX endpoints if immediate patching is not feasible.

Public Exploit Available: Unknown

Given the ease with which a low-privileged user can cause destructive changes to a WordPress environment, this update should be prioritized. Administrators must verify that their plugin installations are updated to version 1.6.1 to eliminate the possibility of unauthorized site modification.