Predictive Search <= 1.2.2 - Missing Authorization

The Predictive Search plugin for WordPress is vulnerable to unauthorized modification and disclosure of data due to missing capability checks on the wp_predictive_search_rebuild_cat_cache_ajax and wp_predictive_search_build_category_cache_error_ajax functions called via wp_ajax and wp_ajax_nopriv hooks in versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to rebuild category cache and view any messages in the error log.