Responsive Plus < 3.2.1 - Missing Authorization

Description

The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the import_sites() function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import site data.