Логотип exploitDog
bind:CVE-2025-11237
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-11237

Количество 2

Количество 2

nvd логотип

CVE-2025-11237

3 месяца назад

The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-vfrf-j3pc-4c2g

3 месяца назад

The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options.

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-11237

The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options.

CVSS3: 5.3
0%
Низкий
3 месяца назад
github логотип
GHSA-vfrf-j3pc-4c2g

The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options.

CVSS3: 5.3
0%
Низкий
3 месяца назад

Уязвимостей на страницу