Easy Theme Options WordPress Plugin Missing Authorization Vulnerability Allowing Arbitrary Settings Import

A vulnerability exists in the Easy Theme Options plugin for WordPress, in all versions through 1.0, due to missing authorization checks in the 'eto_import_settings' function. This flaw allows authenticated attackers with Subscriber-level access and above to import arbitrary plugin settings using the 'eto_import_settings' parameter.

Impact

Exploitation of this vulnerability could lead to unauthorized importation of plugin settings, potentially allowing attackers to manipulate the site's theme options or other related configurations.