Missing Authorization in CTX Feed Plugin Installer

In CTX Feed up to 6.6.11 the ‘Our Plugins’ AJAX installer checks only a nonce, never the user’s capabilities, before it downloads, installs and activates a WordPress.org plugin named in the request. Any logged-in user who can open the CTX Feed admin screens, such as a WooCommerce Shop Manager, can install and activate arbitrary plugins, which can lead to full site takeover. Sites that run CTX Feed 6.5.50 to 6.6.11 and give non-administrator staff a back-office login are at risk.

This vulnerability affects the following application versions:

• CTX Feed – Product Feed Manager for WooCommerce 6.5.50
• CTX Feed – Product Feed Manager for WooCommerce 6.5.51
• CTX Feed – Product Feed Manager for WooCommerce 6.5.52
• CTX Feed – Product Feed Manager for WooCommerce 6.5.53
• CTX Feed – Product Feed Manager for WooCommerce 6.5.54
• CTX Feed – Product Feed Manager for WooCommerce 6.5.55
• CTX Feed – Product Feed Manager for WooCommerce 6.5.56
• CTX Feed – Product Feed Manager for WooCommerce 6.5.57
• CTX Feed – Product Feed Manager for WooCommerce 6.5.58
• CTX Feed – Product Feed Manager for WooCommerce 6.5.59
• CTX Feed – Product Feed Manager for WooCommerce 6.5.60
• CTX Feed – Product Feed Manager for WooCommerce 6.5.61
• CTX Feed – Product Feed Manager for WooCommerce 6.5.62
• CTX Feed – Product Feed Manager for WooCommerce 6.5.63
• CTX Feed – Product Feed Manager for WooCommerce 6.5.64
• CTX Feed – Product Feed Manager for WooCommerce 6.5.65
• CTX Feed – Product Feed Manager for WooCommerce 6.5.66
• CTX Feed – Product Feed Manager for WooCommerce 6.5.67
• CTX Feed – Product Feed Manager for WooCommerce 6.5.68
• CTX Feed – Product Feed Manager for WooCommerce 6.5.69
• CTX Feed – Product Feed Manager for WooCommerce 6.5.70
• CTX Feed – Product Feed Manager for WooCommerce 6.5.71
• CTX Feed – Product Feed Manager for WooCommerce 6.5.72
• CTX Feed – Product Feed Manager for WooCommerce 6.5.73
• CTX Feed – Product Feed Manager for WooCommerce 6.5.74
• CTX Feed – Product Feed Manager for WooCommerce 6.5.75
• CTX Feed – Product Feed Manager for WooCommerce 6.5.76
• CTX Feed – Product Feed Manager for WooCommerce 6.5.77
• CTX Feed – Product Feed Manager for WooCommerce 6.5.78
• CTX Feed – Product Feed Manager for WooCommerce 6.5.79
• CTX Feed – Product Feed Manager for WooCommerce 6.5.80
• CTX Feed – Product Feed Manager for WooCommerce 6.5.81
• CTX Feed – Product Feed Manager for WooCommerce 6.5.82
• CTX Feed – Product Feed Manager for WooCommerce 6.5.83
• CTX Feed – Product Feed Manager for WooCommerce 6.5.84
• CTX Feed – Product Feed Manager for WooCommerce 6.5.85
• CTX Feed – Product Feed Manager for WooCommerce 6.5.86
• CTX Feed – Product Feed Manager for WooCommerce 6.5.87
• CTX Feed – Product Feed Manager for WooCommerce 6.5.88
• CTX Feed – Product Feed Manager for WooCommerce 6.6.0
• CTX Feed – Product Feed Manager for WooCommerce 6.6.1
• CTX Feed – Product Feed Manager for WooCommerce 6.6.2
• CTX Feed – Product Feed Manager for WooCommerce 6.6.3
• CTX Feed – Product Feed Manager for WooCommerce 6.6.4
• CTX Feed – Product Feed Manager for WooCommerce 6.6.5
• CTX Feed – Product Feed Manager for WooCommerce 6.6.6
• CTX Feed – Product Feed Manager for WooCommerce 6.6.7
• CTX Feed – Product Feed Manager for WooCommerce 6.6.8
• CTX Feed – Product Feed Manager for WooCommerce 6.6.9
• CTX Feed – Product Feed Manager for WooCommerce 6.6.10
• CTX Feed – Product Feed Manager for WooCommerce 6.6.11