WordPress Supervisor Plugin Missing Authorization Vulnerability in AJAX Functions

A vulnerability exists in the Supervisor plugin for WordPress, allowing unauthorized data modification. This issue arises from a lack of capability checks on several AJAX functions, affecting all versions up to and including 1.3.2. As a result, authenticated attackers with Subscriber-level access and above can manipulate various plugin settings.

Impact

Exploitation of this vulnerability allows authenticated users with Subscriber-level access and above to unauthorizedly modify plugin settings, potentially leading to further security issues or misuse of the plugin's functionality.

Remediation

Users can update to version 1.3.3 or a newer patched version to address this vulnerability.