Описание
The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.
Ссылки
- Release Notes
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.0.20 (включая)
cpe:2.3:a:webcraftplugins:image_map_pro:*:*:*:*:-:wordpress:*:*
EPSS
Процентиль: 27%
0.00096
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 5.4
github
больше 1 года назад
The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.
EPSS
Процентиль: 27%
0.00096
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-862