3 matches found
CVE-2020-25263
PyroCMS 3.7 is vulnerable to cross-site request forgery CSRF via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted...
PT-2022-14029
Name of the Vulnerable Software and Affected Versions Jupiter Theme versions = 6.10.1 Description The issue allows arbitrary plugin deletion by any authenticated user, including those with the subscriber role, via the abb remove plugin AJAX action. This action is registered in the...
WordPress Jupiter premium theme <= 6.10.1 - Insufficient Access Control leading to Authenticated Arbitrary Plugin Deletion
Insufficient Access Control leading to Authenticated Arbitrary Plugin Deletion discovered by Ramuel Gall Wordfence in WordPress Jupiter premium theme versions = 6.10.1. Solution Update the WordPress Jupiter premium theme to the latest available version at least 6.10.2...