Open mwtemplates opened 10 months ago
Hello @mwtemplates @alexluncashu @ViorelEremia @yura-x
We are getting alerts that the Unyson plugin for WordPress is vulnerable to unauthorised access and modification of data due to missing capability checks on several functions in versions up to and including 2.7.28. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorised actions such as dismissing notices.
Is there a patch in the works?
https://github.com/ThemeFuse/Unyson/issues/4324