Forex Calculators WordPress Plugin Missing Authorization Vulnerability in Settings Update

A vulnerability exists in the Forex Calculators plugin for WordPress, all versions through 1.3.7, allowing unauthorized data modification. The issue arises from a lack of capability checks in the ajax_settings_callback() function. This flaw enables authenticated attackers with Subscriber-level access and above to alter the plugin's settings.

Impact

Exploitation of this vulnerability allows for unauthorized modification of the plugin's settings by authenticated users with Subscriber-level access or higher.

Remediation

Users can update to version 1.3.8 or a newer patched version to address this vulnerability.