Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5wrq-c7c8-h4hx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

EPSS

Процентиль: 97%
0.37383
Средний

9.8 Critical

CVSS3

Дефекты

CWE-284
CWE-425

Связанные уязвимости

CVSS3: 9.8
nvd
почти 5 лет назад

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

EPSS

Процентиль: 97%
0.37383
Средний

9.8 Critical

CVSS3

Дефекты

CWE-284
CWE-425