Import Export For WooCommerce Missing Authorization Vulnerability on Settings Update

A vulnerability exists in the Import Export For WooCommerce plugin for WordPress, in all versions through 1.6.2. The issue arises from a lack of proper capability checks in the update_setting() function, allowing authenticated attackers with Subscriber-level access and above to unauthorizedly modify the plugin's settings. This could lead to unintended changes in the plugin's data management features.

Impact

Exploitation of this vulnerability allows for unauthorized data modification within the plugin, potentially leading to incorrect or malicious data being imported or exported through the WooCommerce platform.