PT-2021-3447

Name of the Vulnerable Software and Affected Versions Tree Sitemap WordPress plugin versions prior to 2.9 Description The issue is related to the cp plugins do button job later callback AJAX action in the Tree Sitemap WordPress plugin, which is associated with authorization procedure errors. This...

CVE-2021-24192: Improper Authorization

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install...