Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-0583
HistoryJun 03, 2023 - 2:15 a.m.

Authorization

2023-06-0302:15:00
PRIOn knowledge base
www.prio-n.com
5
vk blocks
wordpress
plugin
improper authorization
vulnerability

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST ‘update_vk_blocks_options’ function in versions up to, and including, 1.57.0.5. This allows authenticated attackers, with contributor-level permissions or above, to change plugin settings including default icons.

CPENameOperatorVersion
vk_blocksle1.57.0.5

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

Related for PRION:CVE-2023-0583