Lucene search

K
wpvulndbWpvulndbWPVDB-ID:29AC5A99-F7E1-4D09-B068-BB7F3AC9D1D3
HistoryJul 28, 2023 - 12:00 a.m.

Multiple Plugins from Inisev - Subscriber+ Plugin Installation

2023-07-2800:00:00
wpscan.com
25
inisev
authorization
installation
subscribers
plugins

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

49.2%

Description Multiple plugins from the Inisev vendor are lacking authorisation in the handle_installation function hooked to the inisev_installation AJAX action, allowing any authenticated users, such as subscriber to install plugins from Inisev on the blog

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

49.2%

Related for WPVDB-ID:29AC5A99-F7E1-4D09-B068-BB7F3AC9D1D3