Bitly WordPress Plugin Missing Authorization Vulnerability on Settings Update

A vulnerability exists in the Bitly WordPress Plugin, affecting all versions up to and including 2.7.3. The issue arises from a lack of proper capability checks on several AJAX actions, allowing authenticated attackers with Subscriber-level access and above to unauthorizedly modify and access plugin settings.

Impact

Exploitation of this vulnerability allows for unauthorized modification of plugin settings by authenticated users with Subscriber-level access or higher.

Remediation

Users can update to version 2.7.4 or a newer patched version to address this vulnerability.