Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors < 4.11.0 - Missing Authorization

Description

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.10.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.