Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management < 4.6.20 - Missing Authorization

Description

The Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.6.19. This makes it possible for unauthenticated attackers to perform an unauthorized action.