Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update

Description

The plugin does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide plugin setting that should only be modifiable by administrators.