WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin, specifically in versions prior to and including 4.0.7. This vulnerability allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could result in unauthorized access or actions being performed, due to the lack of proper authorization checks in the affected plugin.