Simple Theme Changer WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Simple Theme Changer plugin for WordPress, all versions through 1.0, allowing unauthorized data modification. This issue arises from a lack of capability checks on several AJAX actions, enabling authenticated attackers with subscriber-level access or higher to alter the plugin's settings.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the plugin's settings, potentially allowing attackers to manipulate how themes are managed or displayed.