Brizy 1.0.127 - 2.3.11 - Incorrect Authorization to Post Modification

Description

The Brizy - Page Builder plugin used the Brizy_Editor::is_administrator and Brizy_Editor_User:is_administrator functions for a wide variety of authorization checks, and any user that passed one of these checks was assumed to be an administrator, effectively bypassing almost all of the other capability checks used in the plugin. Unfortunately, due to a logic flaw, being logged in and accessing any endpoint in the wp-admin directory was sufficient to pass this check due to the use of the is_admin() function for authorization checking.

This is identical to https://wpscan.com/vulnerability/03b9c219-6cbc-4735-8bea-041a27212c31 patched in 1.0.126 and was reintroduced in version 1.0.127