CVE-2023-29431 – qTranslate X Cleanup and WPML Import <= 3.0.1 - Missing Authorization via clean_ajx

https://notcve.org/view.php?id=CVE-2023-29431

The qTranslate X Cleanup and WPML Import plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean_ajx function in versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to trigger the 'clean' functionality. • CWE-862: Missing Authorization •