Access violation vulnerability in Simple Custom Post Order 2.5.7

The Simple Custom Post Order plugin for WordPress has a security flaw that could allow unauthorized changes to be made to data. This is because the update_menu_order_tags() function in versions 2.5.7 and below does not have a check for user capabilities. This means that attackers who are logged in with subscriber-level access or higher could potentially modify order tags without permission.