Описание
By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.
Ссылки
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.4 (исключая)
cpe:2.3:a:themeum:wp_page_builder:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 38%
0.00166
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863
CWE-269
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.
EPSS
Процентиль: 38%
0.00166
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863
CWE-269