Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-6590

Опубликовано: 25 сент. 2024
Источник: nvd
CVSS3: 6.3
CVSS3: 4.3
EPSS Низкий

Описание

The Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 3.7.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit post status, edit Google sheet integrations, and create Google sheet integrations.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:javmah:spreadsheet_integration:*:*:*:*:*:wordpress:*:*
Версия до 3.7.9 (включая)

EPSS

Процентиль: 33%
0.0013
Низкий

6.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.3
github
больше 1 года назад

The Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 3.7.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit post status, edit Google sheet integrations, and create Google sheet integrations.

EPSS

Процентиль: 33%
0.0013
Низкий

6.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862