Access violation vulnerability in EventON 2.2.15

The EventON plugin for WordPress has a security issue where anyone can make changes to the data without proper authorization. This is because the plugin does not have a capability check for the ‘eventon_import_settings’ action, which is present in all versions up to 2.2.15. As a result, attackers who are not logged in can modify plugin settings, which can potentially lead to the display of harmful code on event calendar pages.