PT-2023-27345 · WordPress · Radio Player
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Radio Player plugin for WordPress versions up to, and including, 2.0.73
Description
The issue is related to a missing capability check on the
delete player function, allowing unauthenticated attackers to modify data by deleting player instances.Recommendations
For versions up to, and including, 2.0.73, update to a version that includes a fix for the missing capability check on the
delete player function.
As a temporary workaround, consider disabling the delete player function until a patch is available.Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Radio Player