0.001 Low
EPSS
Percentile
26.2%
The plugin does not have any authorisation in a REST endpoint, which could allow unauthenticated users to update arbitrary WordPress options