Product Filter by WBW WordPress Plugin Missing Authorization Vulnerability in Versions Through 3.0.0

A vulnerability exists in the Product Filter by WBW plugin for WordPress, all versions through 3.0.0, allowing unauthorized data modification. The issue arises from a missing capability check on the 'approveNotice' action, enabling unauthenticated attackers to alter the plugin's settings.

Impact

Exploitation of this vulnerability allows for unauthorized changes to the plugin's settings, which could disrupt the functionality of the product filtering system on the WordPress site.

Remediation

Users can update to version 3.0.1 or a newer patched version to address this vulnerability.