PT-2024-12578
CVE-2023-36681
·
تاريخ النشر
2024-12-13
·
تاريخ التحديث
2025-03-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cryptocurrency Widgets – Price Ticker & Coins List versions through 2.6.2
Description
The issue affects the access control security levels in the Cryptocurrency Widgets – Price Ticker & Coins List plugin, allowing exploitation due to incorrectly configured access control security levels. This is a high-severity vulnerability that exploits broken access control.
Recommendations
Update to the latest version to secure your WordPress site.
As a temporary workaround, consider restricting access to the plugin until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾