Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-78xx-mv96-jm4q

Опубликовано: 20 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.

The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.

EPSS

Процентиль: 12%
0.0004
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
около 2 месяцев назад

The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.

EPSS

Процентиль: 12%
0.0004
Низкий

5.3 Medium

CVSS3