DominoKit WordPress Plugin Missing Authorization Vulnerability in Settings Update

A vulnerability exists in the DominoKit plugin for WordPress, all versions through 1.1.0, due to a lack of proper capability checks on the wp_ajax_nopriv_dominokit_option_admin_action AJAX endpoint. This flaw allows unauthenticated attackers to modify plugin settings.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings, potentially allowing attackers to manipulate the plugin's behavior or functionality.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.