Lucene search

K

WpvulndbWPVDB-ID:103908D2-670F-425D-8473-515438EFC1C9

HistoryDec 08, 2023 - 12:00 a.m.

LadiApp <= 4.4 - Missing Authorization

2023-12-0800:00:00

wpscan.com

4

ladiapp vulnerability

missing authorization

data modification

9.1 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Description The plugin is vulnerable to unauthorized access of data, modification of data, or loss of data due to a missing capability check on an unknown function This makes it possible for authenticated attackers, with subscriber-level access and above, to make use of the unprotected functionality.

References

patchstack.com/database/vulnerability/ladipage/wordpress-ladiapp-plugin-4-3-broken-access-control-lead-to-xss-vulnerability

9.1 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Related for WPVDB-ID:103908D2-670F-425D-8473-515438EFC1C9