Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.
Credits
Vulnerability discovered by Tien Nguyen Anh (Patchstack Alliance)