AnimateGL WordPress Plugin Missing Authorization Vulnerability in Settings Update

A vulnerability exists in the AnimateGL Animations for WordPress plugin, specifically in the Elementor and Gutenberg Blocks Animations versions through 1.4.23. The issue arises from a lack of proper capability checks on the 'agl_json' AJAX action, allowing unauthorized users to modify the plugin's settings. This vulnerability could be exploited by unauthenticated attackers to make unauthorized changes to the plugin's configuration.

Impact

Exploitation of this vulnerability allows for unauthorized modification of the plugin's settings, which could lead to unintended changes in the website's animations or performance.