Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m4h7-86xm-549j

Опубликовано: 14 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.4.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings.

The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.4.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings.

EPSS

Процентиль: 16%
0.00051
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.4
nvd
9 месяцев назад

The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.4.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings.

EPSS

Процентиль: 16%
0.00051
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862