Access violation vulnerability in HelloAsso 1.1.10

The HelloAsso plugin for WordPress has a security issue that could allow unauthorized people to change data without permission. This happens because the plugin doesn’t check for the proper capabilities when using the ‘ha_ajax’ function in all versions up to 1.1.10. This means that someone with Contributor-level access or higher could make changes to the plugin’s settings, which could cause problems with the service.