Shortcode Cleaner Lite Missing Authorization Vulnerability in WordPress

A vulnerability exists in the Shortcode Cleaner Lite plugin for WordPress, affecting all versions through 1.0.9. The issue arises from a lack of proper capability checks in the download_backup() function, allowing authenticated attackers with Subscriber-level access or higher to export arbitrary options. This unauthorized data access could lead to exposure of sensitive information or options that could be manipulated.

Impact

Exploitation of this vulnerability could result in unauthorized access to and export of arbitrary options, potentially leading to exposure or manipulation of sensitive data.