Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37m6-2cm3-x5m2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.

EPSS

Процентиль: 74%
0.008
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
больше 6 лет назад

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.

EPSS

Процентиль: 74%
0.008
Низкий