PT-2026-50092 · Mojoomla+1 · Wpams+1
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
WPAMS versions prior to 49.5.3
Description
The WPAMS - Apartment Management System for wordpress plugin for WordPress contains a flaw allowing unauthorized access due to a missing capability check in a function. This allows authenticated attackers with Subscriber-level permissions or higher to delete arbitrary content.
Recommendations
Update to version 49.5.3 or later.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpams
Apartment-Management