Описание
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_request' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to edit event ticket settings if the Events beta feature is enabled.
Ссылки
- Patch
- Patch
- Patch
- Third Party Advisory
Уязвимые конфигурации
EPSS
6.5 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
Связанные уязвимости
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_request' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to edit event ticket settings if the Events beta feature is enabled.
EPSS
6.5 Medium
CVSS3
5.3 Medium
CVSS3