Export Import Menus WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Export Import Menus plugin for WordPress, in all versions through 1.9.1. The issue arises from a lack of proper capability checks in the 'dsp_export_import_menus()' function, allowing unauthenticated users to export menu data and settings without authorization.

Impact

Exploitation of this vulnerability allows for unauthorized access to menu data and settings, enabling attackers to export this information without proper authorization.

Remediation

Users are advised to update the Export Import Menus WordPress plugin to version 1.9.2 or a newer patched version.