WordPress Linkz.ai plugin <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Settings Update vulnerability discovered by István Márton in WordPress Plugin Linkz.ai versions = 1.1.8...

WordPress Linkz.ai Plugin <= 1.1.8 is vulnerable to Broken Access Control

Software Linkz.ai Type Plugin Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9586 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d8f2af1c96f3 Credits István Márton Required privilege...