Access violation vulnerability in Defender Security – Malware Scanner, Login Security & Firewall 4.7.2

The Defender Security plugin for WordPress has a problem where unauthorized people can change important information without permission. This happens because the plugin doesn’t check for the right permission when using the clear_config_transient() function. This means that people who are not logged in can delete important configuration data.