Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mpxq-m5x3-qf7f

Опубликовано: 11 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_linkz' function in versions up to, and including, 1.1.8. This makes it possible for authenticated attackers with contributor-level privileges or above, to update plugin settings.

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_linkz' function in versions up to, and including, 1.1.8. This makes it possible for authenticated attackers with contributor-level privileges or above, to update plugin settings.

EPSS

Процентиль: 14%
0.00047
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_linkz' function in versions up to, and including, 1.1.8. This makes it possible for authenticated attackers with contributor-level privileges or above, to update plugin settings.

EPSS

Процентиль: 14%
0.00047
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862