Access violation vulnerability in Apus Framework 2.3

The Apus Framework plugin for WordPress has a security issue that allows unauthorized changes to be made to data, which could result in an increase in privileges. This is because the plugin does not have a proper system in place to check for user capabilities on the ‘import_page_options’ function. As a result, attackers who are logged in and have at least Subscriber-level access can change any options on the WordPress site. This could potentially allow them to change the default registration role to administrator, giving them full administrative access to the site.