Lucene search
PRIOn knowledge basePRION:CVE-2021-4375HistoryJun 07, 2023 - 2:15 a.m.
Authorization
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
2
welcart e-commerce
wordpress
vulnerability
authenticated
bypass authorization
download
sensitive information
nvd
The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the usces_download_system_information() function in versions up to, and including, 2.2.7. This makes it possible for authenticated attackers to download information including WordPress settings, plugin settings, PHP settings and server settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| welcart_e-commerce | le | 2.2.7 |
Related
cvelist
cvelist
CVE-2021-4375
2023-06-07 01:51:45
nvd
nvd
CVE-2021-4375
2023-06-07 02:15:15
cve
cve
CVE-2021-4375
2023-06-07 02:15:15