freemius-exploit

freemius-exploit Freemius Library 2.2.4 - Atualização Arbitrária de Opções por Assinante+ Descrição A biblioteca, utilizada em diversos plugins, não possui autorização adequada ao atualizar as opções do blog, permitindo que qualquer usuário autenticado, como um assinante, atualize opções...

Multilist Subscribe for Sendy <= 1.6.1 - Subscriber+ Arbitrary Options Update

The plugin is using an outdated version of the Freemius library 1.2.2.9, which is known to be affected by a security issue allowing any authenticated users, such as subscriber to set arbitrary blog options PoC As any authenticated user: Enable new user registrations:...

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

Description The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options As any authenticated user: Enable new user registrations:...