Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E8EF5FAC-A8F1-43A1-A5D6-80CE76AFDF0F
HistoryJan 24, 2024 - 12:00 a.m.

Ninja Tables < 5.0.7 - Contributor+ Table Data Access

2024-01-2400:00:00
wpscan.com
15
ninja tables
vulnerability
data access
contributor-level.

AI Score

6.2

Confidence

High

EPSS

0

Percentile

14.5%

Description The plugin is vulnerable to unauthorized access of data due to a missing capability check on the dragAndDropExport() function. This makes it possible for authenticated attackers, with contributor-level access and above, to export table data.

AI Score

6.2

Confidence

High

EPSS

0

Percentile

14.5%

Related for WPVDB-ID:E8EF5FAC-A8F1-43A1-A5D6-80CE76AFDF0F