Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cp84-243q-m5wp

Опубликовано: 02 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_poll_create_author function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email addresses by enumerating them one character at a time.

The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_poll_create_author function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email addresses by enumerating them one character at a time.

EPSS

Процентиль: 67%
0.00531
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
почти 2 года назад

The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_poll_create_author function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email addresses by enumerating them one character at a time.

EPSS

Процентиль: 67%
0.00531
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862