Multiple Plugins By ThemeHunk (Various Versions) - Missing Authorization via settings_init
mediumMultiple Plugins By ThemeHunk are vulnerable to unauthorized plugin setting modification due to a missing capability check on the settings_init function in various versions. This makes it possible for unauthenticated attackers to reset plugin settings.
- CVSS:
- 6.5
- Affected:
- up to 1.2.5
- Fixed in:
- 1.2.6
- Disclosed:
- Mar 22, 2023