WordPress Plugin Access Control Error Vulnerability (CNVD-2021-101476)

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Plugin is a WordPress open source application plugin. access control error vulnerability in Wordpress Plugin Phoenix Media Rename, the vulnerability stems from not doing permission validation on Ajax operations for the renaming feature. An attacker could rename files that do not belong to them through a user with author rights.