PT-2026-107406 · WordPress · Cp Media Player
CVSS v3.1
2.7
منخفضة
| المتجه | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
CP Media Player versions prior to 1.3.4
Description
The plugin fails to perform a capability check on its settings-page handler. This allows users with Contributor-level access to create, modify, duplicate, and delete site-wide media player configurations, as well as change options that should be restricted to administrator access.
Recommendations
Update to version 1.3.4 or later.
استغلال
إصلاح
Improper Access Control
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Cp Media Player