Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-prwg-rhfj-26j7

Опубликовано: 28 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the templates_ajax_request function in all versions up to, and including, 1.4.4. This makes it possible for subscribers and higher to create templates.

The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the templates_ajax_request function in all versions up to, and including, 1.4.4. This makes it possible for subscribers and higher to create templates.

EPSS

Процентиль: 36%
0.00148
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.3
nvd
почти 2 года назад

The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the templates_ajax_request function in all versions up to, and including, 1.4.4. This makes it possible for subscribers and higher to create templates.

EPSS

Процентиль: 36%
0.00148
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862