Описание
The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.5 (включая)
cpe:2.3:a:menu_item_visibility_control_project:menu_item_visibility_control:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 76%
0.00978
Низкий
7.2 High
CVSS3
Дефекты
NVD-CWE-Other
Связанные уязвимости
CVSS3: 7.2
github
около 3 лет назад
The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment.
EPSS
Процентиль: 76%
0.00978
Низкий
7.2 High
CVSS3
Дефекты
NVD-CWE-Other