Brizy < 1.0.126 - Authorization Bypass to Settings Updates
43Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Actcvss 7.4epss 0.4%
de la publicación al arma
Publicada en NVD20 oct
VulnCheck3 jun
probabilidad de explotación
0.4%top 65% de las CVE
explotación observada
síVulnCheck
The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Productos afectados
themefusecom · Brizy – Page Builder