Access violation vulnerability in NGINX Cache Optimizer 1.1

The NGINX Cache Optimizer plugin for WordPress has a security issue that allows unauthorized changes to be made to the data. This is because there is no check in place to ensure that only authorized users can access the ‘nginxcacheoptimizer-blacklist-update’ feature. This means that anyone with Subscriber-level access or higher can add URLs to the Exclude URLs From Dynamic Caching setting.