Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m495-pg93-8h47

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in certain tables. This attack appear to be exploitable via Attacker must make AJAX request. This vulnerability appears to have been fixed in 3.2.

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in certain tables. This attack appear to be exploitable via Attacker must make AJAX request. This vulnerability appears to have been fixed in 3.2.

EPSS

Процентиль: 44%
0.00212
Низкий

7.5 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 7.5
nvd
больше 7 лет назад

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in certain tables. This attack appear to be exploitable via Attacker must make AJAX request. This vulnerability appears to have been fixed in 3.2.

EPSS

Процентиль: 44%
0.00212
Низкий

7.5 High

CVSS3

Дефекты

CWE-732