WP Search Analytics < 1.4.10 - Missing Authorization

Description

The WP Search Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_default_chart_settings() and render_chart_data() functions in versions up to, and including, 1.4.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugin's settings and render chart data.