Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C431BD21-D2DC-4EDC-A5E0-A8E0BDD6D069
HistoryNov 04, 2022 - 12:00 a.m.

Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update

2022-11-0400:00:00
wpscan.com
10
elementor
unauthenticated
settings update

0.001 Low

EPSS

Percentile

49.4%

The plugin does not have authorisation check when updating its settings, which could allow unauthenticated users, such as subscriber to update them (such as the change the MailChimp API key, 404 page settings etc)

CPENameOperatorVersion
jeg-elementor-kitlt2.5.7

0.001 Low

EPSS

Percentile

49.4%

Related for WPVDB-ID:C431BD21-D2DC-4EDC-A5E0-A8E0BDD6D069