Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/31 12:00 a.m.•1 views

CVE-2023-2434: Missing Authorization

The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'reset' function in versions up to, and including, 3.2.3. This makes it possible for authenticated attackers, with editor-level permissions and above, to reset plugin settings...

3.8CVSS5.7AI score0.00663EPSS
SaveExploits0References3
Rows per page
Query Builder