Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-366j-2qhv-326r

Опубликовано: 19 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'duplicates-action-top' action in all versions up to, and including, 1.9. This makes it possible for unauthenticated attackers to delete arbitrary posts/pages.

The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'duplicates-action-top' action in all versions up to, and including, 1.9. This makes it possible for unauthenticated attackers to delete arbitrary posts/pages.

EPSS

Процентиль: 44%
0.00216
Низкий

7.5 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 7.5
nvd
12 месяцев назад

The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'duplicates-action-top' action in all versions up to, and including, 1.9. This makes it possible for unauthenticated attackers to delete arbitrary posts/pages.

EPSS

Процентиль: 44%
0.00216
Низкий

7.5 High

CVSS3

Дефекты

CWE-862