Accessiy By CodeConfig WordPress Plugin Authorization Bypass Vulnerability

A vulnerability exists in the Accessiy By CodeConfig Accessibility WordPress plugin, specifically in versions through 1.0.0. The issue stems from the plugin's failure to properly verify user authorization for certain actions. This flaw allows authenticated users with subscriber-level access or higher to bypass authorization and alter the plugin's global accessibility settings.

Impact

Exploitation of this vulnerability allows for unauthorized modification of accessibility settings within the WordPress plugin.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.