Lucene search
Ptsfence (Patchstack Alliance)PATCHSTACK:40993ADF1D64FDB0DF5C6AA874FDB9B8HistoryAug 25, 2022 - 12:00 a.m.
WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability
2022-08-2500:00:00
ptsfence (Patchstack Alliance)
patchstack.com
9
0.002 Low
EPSS
Percentile
57.8%
Missing Access Control vulnerability leading to Unauthenticated Stored (XSS) and plugin settings change discovered by ptsfence in WordPress About Rentals plugin (versions <= 1.5).
Solution
Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| about rentals | le | 1.5 |
Related
nvd
nvd
CVE-2022-36427
2022-09-06 23:15:08
cve
cve
CVE-2022-36427
2022-09-06 23:15:08
wpvulndb
wpvulndb
About Rentals <= 1.5 - Unauthenticated Actions
2022-08-25 00:00:00
cvelist
cvelist
prion
prion
Improper access control
2022-09-06 23:15:00