YayCommerce YayPricing Missing Authorization Vulnerability Allowing Access to Unconstrained Functionality

A missing authorization vulnerability has been identified in the YayCommerce YayPricing WordPress plugin, specifically in versions through 3.5.3. This vulnerability allows users to access functionalities that are not properly restricted by access control lists (ACLs), potentially leading to unauthorized actions or data exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to functionalities within the YayPricing plugin, allowing users to perform actions or access data that should be restricted.