CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - activateplugin을 통한 인가 누락 설명 WordPress용 Square 테마는 AJAX 액션을 통해 호출되는 activateplugin 함수에 대한 권한 확인이 누락되어, 2.0.0을 포함한 이전 버전에서 허가되지 않은 플러그인 활성화에 취약합니다. 이로 인해 구독자 수준 이상의 액세스 권한을 가진 인증된 공격자가 임의의 플러그인을 활성화할 수 있습니다. Missing Authorization CVSS Vector...

CVE-2023-30486 WordPress Square theme <= 2.0.0 - Broken Access Control

Missing Authorization vulnerability in hashthemes Square square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through = 2.0.0...

CVE-2023-30486 WordPress Square theme <= 2.0.0 - Broken Access Control

Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0...

CVE-2023-30486

CVE-2023-30486 refers to WordPress Square theme vulnerability (

Exploit for CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Missing Authorization via...

WordPress Square Theme <= 2.0.0 is vulnerable to Broken Access Control

Software Square Type Theme Vulnerable versions = 2.0.0 Fixed in 2.0.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30486 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6813b5262bc4 Credits Dave Jong Patchstack Required privilege...