Lucene search
PRIOn knowledge basePRION:CVE-2023-5506HistoryNov 07, 2023 - 11:15 a.m.
Design/Logic Flaw
2023-11-0711:15:00
PRIOn knowledge base
www.prio-n.com
wordpress
imagemapper
capability check
data loss
unauthorized
vulnerability
authenticated attackers
subscriber-level permissions
The ImageMapper plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ‘imgmap_delete_area_ajax’ function in versions up to, and including, 1.2.6. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete arbitrary posts and pages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| imagemapper | le | 1.2.6 |
Related
cve
cve
CVE-2023-5506
2023-11-07 11:15:11
nvd
nvd
CVE-2023-5506
2023-11-07 11:15:11
cvelist
cvelist
CVE-2023-5506
2023-11-07 11:01:44
wpvulndb
wpvulndb
ImageMapper <= 1.2.6 - Subscriber+ Arbitrary Post Deletion
2023-11-16 00:00:00
wordfence
wordfence