Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-0856

Опубликовано: 06 мая 2025
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0. This makes it possible for unauthenticated attackers to add, modify, or plugin options.

EPSS

Процентиль: 47%
0.00238
Низкий

7.3 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 7.3
github
9 месяцев назад

The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0. This makes it possible for unauthenticated attackers to add, modify, or plugin options.

EPSS

Процентиль: 47%
0.00238
Низкий

7.3 High

CVSS3

Дефекты

CWE-862