Access violation vulnerability in Addon Library 1.3.76

The Addon Library plugin for WordPress has a security issue that can allow people to access data without permission. This is because there is a missing check to make sure the person has the right capabilities. This issue exists in all versions up to 1.3.76. This means that someone who is logged in and has at least subscriber-level access can do things they shouldn’t be able to, like uploading any file they want.