Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-5737
HistoryNov 27, 2023 - 5:15 p.m.

Design/Logic Flaw

2023-11-2717:15:00
PRIOn knowledge base
www.prio-n.com
6
wordpress
backup & migration
ajax
unauthorized access
user role

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings.

CPENameOperatorVersion
backup_and_migrationlt1.4.4

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

Related for PRION:CVE-2023-5737