Consensu.io <= 1.0.2 - Missing Authorization via update_config_db()

Description The Consensu.io plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_config_db() function in versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to modify the plugin’s setting.