1 matches found
CVE-2023-2434: Missing Authorization
The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'reset' function in versions up to, and including, 3.2.3. This makes it possible for authenticated attackers, with editor-level permissions and above, to reset plugin settings...
3.8CVSS5.7AI score0.00663EPSS
SaveExploits0References3
20