Newsletter2Go WordPress Plugin Missing Authorization Vulnerability in Styles Reset Action

A vulnerability exists in the Newsletter2Go plugin for WordPress, allowing unauthorized data modification. This issue arises from a lack of capability checks on the 'resetStyles' AJAX action, affecting all versions through 4.0.14. The vulnerability enables authenticated attackers with Subscriber-level access and above to reset styles.

Impact

Exploitation of this vulnerability allows for unauthorized style resets, potentially disrupting the intended design and functionality of the affected WordPress site.