Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-74810
HistoryNov 21, 2022 - 12:00 a.m.

WordPress Plugin WPML Multilingual CMS premium Access Control Error Vulnerability

2022-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
wordpress
wpml multilingual cms
access control
vulnerability
application
php
mysql
security

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

22.7%

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error vulnerability exists in the WordPress plugin WPML Multilingual CMS premium, which stems from the presence of improper access control in the application and can be exploited by an attacker to change plugin settings.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

22.7%