Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m44q-wqh5-45w3

Опубликовано: 25 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.

The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.

EPSS

Процентиль: 27%
0.00096
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.

EPSS

Процентиль: 27%
0.00096
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862