CVE-2023-6600

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to unauthorized data modification and Stored Cross-Site Scripting (XSS) . The root cause is a missing capability check on the update_settings() function, which is hooked via admin_init in all versions u...