Molongui < 4.7.4 - Missing Authorization

Description

The Molongui plugin for WordPress is vulnerable to unauthorized modification and access of data due to missing capability checks on the authorship_export_options() and authorship_save_options() functions hooked via AJAX in versions up to, and including, 4.7.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to export and modify plugin options.