Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqqc-9cq3-qc2r

Опубликовано: 02 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_create_index() function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to trigger index creation.

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_create_index() function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to trigger index creation.

EPSS

Процентиль: 41%
0.00187
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
почти 2 года назад

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_create_index() function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to trigger index creation.

EPSS

Процентиль: 41%
0.00187
Низкий

4.3 Medium

CVSS3