Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-74815
HistoryOct 31, 2022 - 12:00 a.m.

WordPress theme Bricks license issue vulnerability

2022-10-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
wordpress
bricks theme
authorization vulnerability
php
mysql
ajax
security issue

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

22.7%

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress theme is a theme for WordPress. An authorization issue vulnerability exists in WordPress theme Bricks plugin 1.0 and later, 1.5.3 and earlier versions, which stems from its lack of a functional check for the bricks_save_post AJAX operation, and can be exploited by an attacker to edit any page, post, or template on a vulnerable WordPress site.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

22.7%