CVE-2014-3844

2014-05-2215:00:00

mitre

www.cve.org

tinymce color picker

wordpress

permissions

remote attackers

plugin settings

cve-2014-3844

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

72.2%

JSON

The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/58095

wordpress.org/plugins/tinymce-colorpicker/changelog