7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.2%
The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users’ account address.
wpscan.com/vulnerability/9debe1ea-18ad-44c4-8078-68eb66d36c4a/