CyberRota Analysis
AI-GeneratedThe Visualizer WordPress plugin prior to version 4.0.6 is vulnerable due to improper access controls, enabling users with Contributor roles and higher to publish, rename, and overwrite posts and pages, including private drafts belonging to other users. This could lead to unauthorized content manipulation and potential data exposure. WordPress site administrators and users of the Visualizer plugin should prioritize updating to the latest version to mitigate these risks.
Original NVD Description
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts.