Lucene search
Ptsfence (Patchstack Alliance)PATCHSTACK:40993ADF1D64FDB0DF5C6AA874FDB9B8HistoryAug 25, 2022 - 12:00 a.m.
WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability
2022-08-2500:00:00
ptsfence (Patchstack Alliance)
patchstack.com
12
wordpress
rentals plugin
access control
unauthenticated stored
xss
plugin settings change
vulnerability
deactivate
delete
closure
review
EPSS
0.002
Percentile
57.6%
Missing Access Control vulnerability leading to Unauthenticated Stored (XSS) and plugin settings change discovered by ptsfence in WordPress About Rentals plugin (versions <= 1.5).
Solution
Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This closure is temporary, pending a full review.
Related
nvd
nvd
CVE-2022-36427
2022-09-06 23:15:08
cve
cve
CVE-2022-36427
2022-09-06 23:15:08
prion
prion
Improper access control
2022-09-06 23:15:00
wpvulndb
wpvulndb
About Rentals <= 1.5 - Unauthenticated Actions
2022-08-25 00:00:00
cvelist
cvelist