PT-2026-71028 · WordPress · Wpc Admin Columns
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WPC Admin Columns versions prior to 2.3.4
Description
The WPC Admin Columns WordPress plugin lacks authorization checks in an AJAX action. This allows users with roles as low as subscriber to read arbitrary user, post, and term metadata, which may include sensitive information belonging to administrators.
Recommendations
Update WPC Admin Columns to version 2.3.4 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpc Admin Columns