Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvx5-h7p4-ffvx

Опубликовано: 10 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The Greeklish-permalink WordPress plugin through 3.3 does not implement correct authorization or nonce checks in the cyrtrans_ajax_old AJAX action, allowing unauthenticated and low-privilege users to trigger the plugin's functionality to change Post slugs either directly or through CSRF.

The Greeklish-permalink WordPress plugin through 3.3 does not implement correct authorization or nonce checks in the cyrtrans_ajax_old AJAX action, allowing unauthenticated and low-privilege users to trigger the plugin's functionality to change Post slugs either directly or through CSRF.

EPSS

Процентиль: 17%
0.00054
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 4.3
nvd
больше 2 лет назад

The Greeklish-permalink WordPress plugin through 3.3 does not implement correct authorization or nonce checks in the cyrtrans_ajax_old AJAX action, allowing unauthenticated and low-privilege users to trigger the plugin's functionality to change Post slugs either directly or through CSRF.

EPSS

Процентиль: 17%
0.00054
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-269