Modula <= 2.7.4 - Incomplete Authorization via 'save_image' and 'save_images'

The Modula plugin for WordPress is vulnerable to unauthorized modification of data due to an incomplete capability check on the 'save_image' and 'save_images' functions in versions up to, and including, 2.7.4. This makes it possible for authenticated attackers with the 'edit_others_posts' but not the 'edit_posts' capability to save images. Note that this would only be considered a vulnerability on extremely unusual configurations.