Access violation vulnerability in Editorial Assistant by Sovrn 1.3.3

The Sovrn plugin for WordPress called “Editorial Assistant” has a security issue that allows unauthorized changes to be made to data. This is because there is a missing feature that checks for permissions before using the ‘ajax_zemanta_set_featured_image’ function. This means that attackers who are logged in and have at least subscriber-level access can upload certain types of files (like images, text documents, or zip files) and set them as the featured image for a post.