Convert WebP & AVIF Quicq WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Convert WebP & AVIF Quicq WordPress plugin, specifically in versions through 2.0.0. The issue arises from a lack of proper capability checks on the 'wp_ajax_wpqai_disconnect_quicq_afosto' AJAX endpoint. This flaw allows authenticated attackers with Subscriber-level access and above to disconnect Afosto, leading to unauthorized modification of data.

Impact

Exploitation of this vulnerability allows for unauthorized disconnection of Afosto, potentially disrupting services or functionalities associated with it.