Improper access control

2019-08-2214:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.0%

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.

CPENameOperatorVersion
profile_builderlt2.1.4

CPE	Name	Operator	Version
	profile_builder	lt	2.1.4

References

wordpress.org/plugins/profile-builder/