WordPress plugin myCred authorization problem vulnerability

WordPress is a set of blogging platform developed using the PHP language. myCred 2.4.4, a WordPress plugin, previously had an authorization issue vulnerability, which stems from the plugin’s failure to perform any authorization and CSRF checks in the myCred tool’s import and export AJAX operations, which could be exploited by an attacker to invoke and import mycred settings to create badges, admin points or create arbitrary posts.