WordPress Envo Extra <= 1.9.9 - Broken Access Control Vulnerability
Missing Authorization vulnerability in EnvoThemes Envo Extra allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Envo Extra: from n/a through 1.9.9.