Описание
There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.5.14 (включая)
cpe:2.3:a:de-baat:store_locator_plus:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 77%
0.01005
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-269
Связанные уязвимости
github
больше 3 лет назад
There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.
EPSS
Процентиль: 77%
0.01005
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-269