Woostify Sites Library <= 1.4.7 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

The Woostify Sites Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'woostify_sites_child_theme' in all versions up to, and including, 1.4.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options to 'activated' which can lead to a denial of service.