CVE-2021-24779: 
WordPress vulnerability analysis and mitigation

The WP Debugging WordPress plugin before version 2.11.0 contains a security vulnerability identified as CVE-2021-24779. The vulnerability was discovered and publicly disclosed on September 27, 2021. The issue affects the plugin's update_settings() function, which lacks proper authorization and CSRF protection mechanisms (WPScan Details).

The vulnerability stems from the update_settings() function being hooked to admin_init without implementing proper authorization and CSRF checks. The vulnerability is classified as CWE-862 (Missing Authorization) and has received a CVSS score of 4.3 (medium severity). This security issue falls under the OWASP Top 10 category A5: Broken Access Control (WPScan Details).

Due to the missing authorization checks, unauthenticated users can modify the plugin's settings through the WordPress admin interface. This could potentially lead to unauthorized changes in the debugging configuration of the WordPress installation (WPScan Details).

The vulnerability has been fixed in version 2.11.0 of the WP Debugging plugin. Users are advised to update to this version or later to mitigate the security risk (WPScan Details).