UiPress Lite Missing Authorization Vulnerability in WordPress Plugin

A vulnerability exists in the UiPress Lite WordPress plugin, specifically in versions up to and including 3.5.09. The issue arises from a lack of proper capability checks in the 'uip_save_global_settings' function, allowing authenticated attackers with Subscriber-level access or higher to unauthorizedly modify plugin settings. This could lead to arbitrary changes in the plugin's configuration, potentially disrupting the site's functionality or user experience.

Impact

Exploitation of this vulnerability allows for unauthorized modification of plugin settings, which could disrupt site functionality or user experience.