Notiqoo
Monthly
Missing capability checks in the Notiqoo WordPress plugin (before 1.4.14) expose multiple AJAX endpoints to any authenticated contributor-level user, allowing arbitrary WordPress option writes. Because the option name is constructed directly from user-supplied input with no validation or authorization gate, a contributor can overwrite any site option - including disabling the Notiqoo plugin itself or corrupting the admin email/user-role mappings to lock every administrator out of the WordPress dashboard. A publicly available proof-of-concept exploit exists per WPScan, and the SSVC framework classifies technical impact as partial with no confirmed active exploitation at time of analysis.
Missing capability checks in the Notiqoo WordPress plugin (before 1.4.14) expose multiple AJAX endpoints to any authenticated contributor-level user, allowing arbitrary WordPress option writes. Because the option name is constructed directly from user-supplied input with no validation or authorization gate, a contributor can overwrite any site option - including disabling the Notiqoo plugin itself or corrupting the admin email/user-role mappings to lock every administrator out of the WordPress dashboard. A publicly available proof-of-concept exploit exists per WPScan, and the SSVC framework classifies technical impact as partial with no confirmed active exploitation at time of analysis.