WP Social Ninja WordPress Plugin Missing Authorization Vulnerability in Advanced Settings

A vulnerability exists in the WP Social Ninja WordPress plugin, specifically in versions through 4.0.1. The issue arises from a lack of proper capability checks in the 'getAdvanceSettings' and 'saveAdvanceSettings' functions. This flaw allows unauthenticated users to access and modify the plugin's advanced settings.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure and modification of the plugin's advanced settings.

Remediation

Users are advised to update the WP Social Ninja plugin to version 4.0.2 or a newer patched version.