WPSyncSheets Lite For WPForms Missing Authorization Vulnerability Allowing Settings Reset

A vulnerability exists in the WPSyncSheets Lite For WPForms Google Spreadsheet Addon for WordPress, in all versions through 1.6, allowing authenticated users with Subscriber-level access and above to reset the plugin's settings. This issue arises from a missing capability check in the 'wpsslwp_reset_settings' function, which enables unauthorized modification of data.

Impact

Exploitation of this vulnerability allows for unauthorized resetting of the WPSyncSheets Lite For WPForms plugin settings, potentially disrupting user configurations and data management within the application.

Remediation

Users can update to version 1.6.1 or a newer patched version to address this vulnerability.