Brizy < 1.0.126 - Authorization Bypass to Settings Updates
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 7.4epss 0.4%
da publicação à arma
Publicada no NVD20 de out.
VulnCheck3 de jun.
probabilidade de exploração
0.4%top 65% das CVEs
exploração observada
simVulnCheck
The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
themefusecom · Brizy – Page Builder