Popup WordPress Plugin Missing Authorization Vulnerability Allowing Unauthenticated Data Deletion

A vulnerability exists in the Popup – MailChimp, GetResponse and ActiveCampaign Integrations plugin for WordPress, in all versions through 3.2.6. The issue arises from a lack of proper capability checks on the 'upc_delete_db_data' AJAX action, allowing unauthenticated attackers to delete database data associated with the plugin.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of the plugin's database data.