Spacer WordPress Plugin Missing Authorization Vulnerability in Versions Through 3.0.7

A vulnerability exists in the Spacer plugin for WordPress, all versions through 3.0.7, due to a missing capability check in the motech_spacer_callback() function. This flaw allows authenticated attackers with Subscriber-level access and above to access and view limited setting information, leading to unauthorized data disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data, specifically limited setting information, for authenticated users with Subscriber-level access or higher.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.