Lucene search
WpvulndbWPVDB-ID:4BC0EDB5-7946-4F7E-B567-B0AA901121B1HistoryJan 10, 2023 - 12:00 a.m.
Royal Elementor Addons < 1.3.60 - Subscriber+ Mega Menu Settings Update
2023-01-1000:00:00
wpscan.com
13
royal elementor addons
mega menu
authorization
csrf
subscriber
security update
software
EPSS
0.001
Percentile
26.3%
The plugin does not have authorisation and CSRF checks when updating the mega menu settings, which could allow any authenticated user, such as subscriber to perform such action
Related
cve
cve
CVE-2022-4711
2023-01-10 17:15:11
cvelist
cvelist
CVE-2022-4711
2023-01-10 16:55:15
prion
prion
Improper access control
2023-01-10 17:15:00
nvd
nvd
CVE-2022-4711
2023-01-10 17:15:11
wordfence
wordfence
Eleven Vulnerabilities Patched in Royal Elementor Addons
2023-01-10 16:41:21
packetstorm
packetstorm
WordPress Royal Elementor 1.3.59 XSS / CSRF / Insufficient Access Controls
2023-01-11 00:00:00
openvas
openvas