MainWP Rocket Extension <= 4.0.3 is vulnerable to Subscriber+ Plugin Settings Change Vulnerability

The MainWP Rocket Extension plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 4.0.3 due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change the plugin's settings.