Technical impact
The Easy Theme Options plugin for WordPress has a missing authorization check in the eto_import_settings function. Attackers who are authenticated as Subscribers or higher can submit the eto_import_settings parameter and import arbitrary plugin settings. Because this capability bypasses normal role checks, a low‑privileged user can modify the plugin configuration, potentially enabling further compromise or altering site behavior. This weakness is identified as CWE‑862 and is reflected in the CVSS score of 5.3, indicating medium severity.
Affected Systems
The vulnerability affects the Easy Theme Options plugin provided by corsonr, all releases up to and including version 1.0. No specific sub‑versions beyond 1.0 are listed, but any installation of 1.0 or earlier is considered affected.
Risk and Exploitability
With a CVSS score of 5.3, the risk is moderate, and the EPSS score of less than 1% suggests that exploitation attempts are unlikely at this time. The vulnerability is not listed in the CISA KEV catalog. Attackers must have a valid WordPress account with Subscriber privileges or higher, but no network-level access is required. The exploitation path is straightforward: submit a HTTP request to the plugin’s import endpoint with crafted settings data, leading the plugin to apply them without proper authorization.
