Uncanny Automator WordPress Plugin Missing Capability Check Vulnerability

A vulnerability exists in the Uncanny Automator WordPress plugin, in versions through 6.4.0.2, allowing authenticated users with subscriber-level permissions or higher to unauthorizedly modify plugin settings. This issue arises from a lack of proper capability checks on several AJAX functions, which could be exploited to update plugin configurations without the necessary permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings, potentially allowing for further exploitation or disruption of site functionality.

Remediation

Users are advised to update the Uncanny Automator WordPress plugin to version 6.5.0 or later.