0.001 Low
EPSS
Percentile
19.4%
The plugin does not have any authorisation when updating its settings via an AJAX action, allowing any authenticated users, such as subscriber to change them