Lucene search
WpvulndbWPVDB-ID:6C726E12-2447-48EF-AB50-6416E7D047F7HistoryMay 08, 2024 - 12:00 a.m.
Swift Performance Lite < 2.3.6.19 - Subscriber+ Settings Update
2024-05-0800:00:00
wpscan.com
8
wordpress
plugin
vulnerability
authentication
unauthorized access
capability check
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
14.0%
Description The plugin is vulnerable to unauthorized access due to a missing capability check on the ajax_handler() function, allowing authenticated attackers, with subscriber-level access and above, to retrieve and modify settings.
Related
cvelist
cvelist
nvd
nvd
CVE-2024-3722
2024-05-14 15:42:06
vulnrichment
vulnrichment
cve
cve
CVE-2024-3722
2024-05-14 15:42:06
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
14.0%
Related for WPVDB-ID:6C726E12-2447-48EF-AB50-6416E7D047F7