Threats tagged 'ghsa-358q-57fj-36xj'

The Email Marketing 4Dem WordPress plugin versions up to 2.0.5 lack authorization and capability checks on multiple AJAX actions and REST routes. This flaw allows unauthenticated users to access and disclose stored plugin configuration and data, as well as modify the plugin's stored settings.