Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j66f-pwrh-8rh3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download.

The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download.

EPSS

Процентиль: 35%
0.0014
Низкий

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 4.3
nvd
около 4 лет назад

The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download.

EPSS

Процентиль: 35%
0.0014
Низкий

Дефекты

CWE-284