Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m5q7-cf66-2jc8

Опубликовано: 24 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to modify access to the plugin when it should only be the administrator's privilege.

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to modify access to the plugin when it should only be the administrator's privilege.

EPSS

Процентиль: 28%
0.00101
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.6
nvd
больше 2 лет назад

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to modify access to the plugin when it should only be the administrator's privilege.

EPSS

Процентиль: 28%
0.00101
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-862