An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access.Referenceshttps://developer.joomla.org/security-centre/775-20190304-core-missing-acl-check-in-sample-data-pluginshttp://www.securityfocus.com/bid/107372