Access violation vulnerability in Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 2.11.1

The Paid Membership Subscriptions plugin for WordPress allows users to easily create memberships, set up recurring payments, and restrict access to certain content. However, it has a security vulnerability that could allow unauthorized individuals to modify data without permission. This is because the plugin does not check for the appropriate capability when using the pms_stripe_connect_handle_authorization_return function. This means that hackers who are not logged in could potentially change the Stripe payment keys without any restrictions.