WordPress BeyondSEO permission and access control issue vulnerability

WordPress BeyondSEO versions 1.3.6 and earlier contain a permission and access control vulnerability. This issue arises because the plugin permanently grants module capabilities such as “rankingcoachwriteredirectManager” to the Contributor role via BaseModule::defineCapabilities. Additionally, th...