Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfpc-9686-g9rf

Опубликовано: 19 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the site_ads_files_reset() and cls_file_reset() functions in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to reset the ad and cls files.

The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the site_ads_files_reset() and cls_file_reset() functions in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to reset the ad and cls files.

EPSS

Процентиль: 63%
0.00451
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
12 месяцев назад

The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the site_ads_files_reset() and cls_file_reset() functions in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to reset the ad and cls files.

EPSS

Процентиль: 63%
0.00451
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862