Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103088
HistoryNov 10, 2021 - 12:00 a.m.

WordPress DSGVO Tools Access Control Error Vulnerability

2021-11-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.002 Low

EPSS

Percentile

52.3%

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress DSGVO Tools in version 3.1.23 and earlier has an access control error vulnerability that stems from the application’s lack of capability checking and random number checking, which can be exploited by an unauthenticated attacker to remove unsubscriptions without checking post type requirements.

CPENameOperatorVersion
wordpress dsgvo toolsle3.1.23

0.002 Low

EPSS

Percentile

52.3%