Threats tagged 'ghsa-4753-4c7m-r6px'

A vulnerability in the CMP WordPress plugin before version 4.1.18 allows users with the Editor role, if granted access to the plugin's admin-bar controls, to update arbitrary WordPress options via an AJAX action. This improper privilege management can lead to privilege escalation to Administrator.