RevivePress < 1.5.6.1 - Subscriber+ Settings Update/Access

Description

The plugin is vulnerable to unauthorized access and modification of data due to a missing capability check on the import_data and copy_data functions. This makes it possible for authenticated attackers, with subscriber-level access or higher, to overwrite plugin settings and view them.