Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2rxq-q8qw-7pgp

Опубликовано: 30 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site's custom-uploaded icon font packs, allowing unauthenticated attackers to permanently delete all of a site's custom icon fonts with a single request.

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site's custom-uploaded icon font packs, allowing unauthenticated attackers to permanently delete all of a site's custom icon fonts with a single request.

EPSS

Процентиль: 13%
0.00226
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 6.5
nvd
9 дней назад

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site's custom-uploaded icon font packs, allowing unauthenticated attackers to permanently delete all of a site's custom icon fonts with a single request.

EPSS

Процентиль: 13%
0.00226
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-73