Description Multiple plugins from the Inisev vendor are lacking authorisation in the handle_installation function hooked to the inisev_installation AJAX action, allowing any authenticated users, such as subscriber to install plugins from Inisev on the blog