Threats tagged 'ghsa-jh47-5p6m-9pgg'

The WSChat WordPress Live Chat plugin is vulnerable to unauthorized modification of its settings due to a missing capability check on the 'reset_settings' AJAX endpoint. This affects all versions up to and including 3.1.6. Authenticated users with Subscriber-level access or higher can reset the plugin's settings without proper authorization.