360 Javascript Viewer < 1.7.12 - Unauthenticated Settings Update

2023-12-0200:00:00

wpscan.com

javascript

viewer

unauthenticated

settings

update

9.4 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Description The plugin does not have authorisation check when updating its settings, which could allow unauthenticated users to update them

CPENameOperatorVersion
eq1.7.12

CPE	Name	Operator	Version
		eq	1.7.12

References

patchstack.com/database/vulnerability/360deg-javascript-viewer/wordpress-360-javascript-viewer-plugin-1-7-11-broken-access-control-vulnerability