The plugin’s AJAX handlers for database search and replace operations only verified CSRF nonce tokens but did not check user capabilities. This could allow authenticated users without the required privilege level to perform unauthorized search and replace operations on the WordPress database.
This vulnerability affects the following application versions:
- Better Search Replace 1.3.4
- Better Search Replace 1.4
- Better Search Replace 1.4.1
- Better Search Replace 1.4.2
- Better Search Replace 1.4.3
- Better Search Replace 1.4.4
- Better Search Replace 1.4.5
- Better Search Replace 1.4.6
- Better Search Replace 1.4.7
- Better Search Replace 1.4.9