PT-2026-3346 · WordPress · Phrase Tms Integration For Wordpress
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
The Phrase TMS Integration for WordPress versions through 4.7.5
Description
The Phrase TMS Integration for WordPress plugin is affected by an issue allowing unauthorized modification of data. This is due to a missing capability check on the
wp ajax delete log API endpoint. Authenticated attackers with Subscriber-level access or higher can delete log files. The vulnerable parameter is not specified.Recommendations
Update The Phrase TMS Integration for WordPress to a version later than 4.7.5.
Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phrase Tms Integration For Wordpress