Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ggcw-7gr7-458r

Опубликовано: 14 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajax_handler() function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve and modify settings.

The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajax_handler() function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve and modify settings.

EPSS

Процентиль: 36%
0.00153
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajax_handler() function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve and modify settings.

EPSS

Процентиль: 36%
0.00153
Низкий

5.4 Medium

CVSS3