Access violation vulnerability in Media Manager for UserPro 3.11.0

The Media Manager for UserPro plugin on WordPress has a security issue that allows unauthorized changes to be made, potentially giving someone more power than they should have. This is because the plugin doesn’t check for certain permissions before using a function called “add_capto_img().” This means that people who aren’t logged in can change certain settings on a WordPress site. They could use this to make themselves an administrator and allow them to register as a user with administrative rights on a site that is vulnerable.