Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mrg7-x5vh-pv4c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error.

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error.

EPSS

Процентиль: 36%
0.00152
Низкий

Связанные уязвимости

CVSS3: 4.3
nvd
больше 6 лет назад

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error.

EPSS

Процентиль: 36%
0.00152
Низкий