Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-07756
HistoryNov 23, 2022 - 12:00 a.m.

WordPress WPML Multilingual CMS premium plugin access control error vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
64
wordpress
wpml multilingual cms
premium plugin
access control error
vulnerability
php
translation work
attack

EPSS

0.001

Percentile

22.7%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WPML Multilingual CMS premium plugin 4.5.10 and earlier versions are vulnerable to an access control error, which stems from the presence of improper access control. An attacker can exploit the vulnerability to change the state of the translation work.

EPSS

0.001

Percentile

22.7%