Magic Import Document Extractor WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Magic Import Document Extractor plugin for WordPress, in all versions through 1.0.4. The issue arises from a lack of proper capability checks in the ajax_sync_usage() function, allowing unauthenticated attackers to unauthorizedly modify the plugin's license status and credit balance.

Impact

Exploitation of this vulnerability allows for unauthorized changes to the plugin's license status and credit balance, which could disrupt the intended functionality of the plugin and potentially lead to unauthorized access to premium features or services.