CVE-2022-4948

CVE-2022-4948 concerns the WordPress FlyingPress plugin, where versions up to and including 3.9.6 are vulnerable to an authorization bypass caused by a missing capability check on AJAX actions. The effect is that authenticated users with subscriber-level permissions and above can interact with th...