Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jhxw-3422-m7cw

Опубликовано: 27 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.

EPSS

Процентиль: 27%
0.00096
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.5
nvd
почти 3 года назад

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.

EPSS

Процентиль: 27%
0.00096
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352