PT-2023-32140
CVE-2023-5506
·
Publicado
2023-11-07
·
Atualizado
2023-11-14
Descrição por
CVSS 3.1
5.4
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
ImageMapper plugin for WordPress versions up to, and including, 1.2.6
Description
The issue allows authenticated attackers with subscriber-level permissions and above to delete arbitrary posts and pages due to a missing capability check on the
imgmap delete area ajax function.Recommendations
For versions up to, and including, 1.2.6, update to a version that includes a fix for the missing capability check in the
imgmap delete area ajax function to prevent unauthorized data loss.Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾