Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-924c-vmpj-6rfg

Опубликовано: 08 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars.

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars.

EPSS

Процентиль: 41%
0.00194
Низкий

8.8 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 8.8
nvd
около 1 года назад

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars.

EPSS

Процентиль: 41%
0.00194
Низкий

8.8 High

CVSS3

Дефекты

CWE-862