Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-2494

Опубликовано: 24 мая 2023
Источник: nvd
CVSS3: 4.6
CVSS3: 8.8
EPSS Низкий

Описание

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to modify access to the plugin when it should only be the administrator's privilege.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:granthweb:go_pricing:*:*:*:*:*:wordpress:*:*
Версия до 3.3.19 (включая)

EPSS

Процентиль: 28%
0.00101
Низкий

4.6 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.6
github
больше 2 лет назад

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin to modify access to the plugin when it should only be the administrator's privilege.

EPSS

Процентиль: 28%
0.00101
Низкий

4.6 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-862