Description
WordPress Plugin WP Debugging is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently update plugin's settings. WordPress Plugin WP Debugging version 2.10.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.11.0 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:8D0E65EE-FDD1-4FD6-9A27-01664C703D90
https://plugins.svn.wordpress.org/wp-debugging/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin File Manager Remote Code Execution (4.5)
WordPress Plugin Easy Pixels Unspecified Vulnerability (1.8.2)
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.31)
WordPress Plugin Google Maps in Posts Cross-Site Scripting (1.5.3)
WordPress Plugin Titan Framework Cross-Site Scripting (1.12.1)