WordPress CURCY Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WordPress CURCY plugin, specifically in versions through 2.3.7. This vulnerability allows users to access functionalities that are not properly restricted by access control lists (ACLs), potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could allow an unauthenticated user to perform actions or access features that should be restricted, potentially leading to unauthorized changes or access within the WordPress site.