GrandPlugins WordPress Image Sizes Controller Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the GrandPlugins WordPress Image Sizes Controller plugin, specifically in versions through 1.0.9. This vulnerability allows users with subscriber privileges to create custom image sizes and disable certain image size settings, exploiting improperly configured access control measures.

Impact

Exploitation of this vulnerability could allow a subscriber-level user to perform actions that should be restricted to higher privilege levels, such as creating and managing custom image sizes.