Lucene search
PRIOn knowledge basePRION:CVE-2023-2555HistoryJun 09, 2023 - 6:16 a.m.
Design/Logic Flaw
2023-06-0906:16:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
currency switcher
vulnerability
data modification
capability check
plugin security
The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create function in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to create a custom drop-down currency switcher.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_currency_switcher_professional | le | 1.1.9 |
Related
cvelist
cvelist
CVE-2023-2555
2023-06-09 05:33:36
nvd
nvd
CVE-2023-2555
2023-06-09 06:16:08
cve
cve
CVE-2023-2555
2023-06-09 06:16:08
wordfence
wordfence