CyberRota Analysis
AI-GeneratedThe Zonify WordPress plugin prior to version 1.0.5 is vulnerable due to a lack of capability and authentication checks, enabling unauthenticated attackers to access the site's stored account login token. This flaw can lead to unauthorized access to the site owner's linked service account, potentially compromising sensitive data and functionality. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the site's stored account login token, allowing unauthenticated attackers to retrieve it and authenticate to the site owner's linked service account.