PT-2023-22758
CVE-2023-3053
·
تاريخ النشر
2023-06-02
·
تاريخ التحديث
2023-06-09
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
The Page Builder by AZEXO plugin for WordPress versions up to, and including, 1.27.133
Description
The issue allows authenticated attackers to create a post with any post type and post status due to a missing capability check on the
azh add post function. This enables unauthorized modification of data.Recommendations
For versions up to, and including, 1.27.133, consider disabling the
azh add post function until a patch is available to prevent unauthorized data modification. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾