Description
WordPress Plugin Advanced Access Manager is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently gain administrator privileges. WordPress Plugin Advanced Access Manager version 3.2.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.2.2 or latest
References
http://www.pritect.net/blog/advanced-access-manager-3-2-1-security-vulnerability
https://wordpress.org/plugins/advanced-access-manager/changelog/
Related Vulnerabilities
WordPress Plugin Easy Appointments Cross-Site Scripting (1.11.7)
WordPress Plugin Timetable and Event Schedule by MotoPress Unspecified Vulnerability (2.4.3)
Oracle HTTP Server CVE-2020-2530 Vulnerability (CVE-2020-2530)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3062)