3 matches found
Design/Logic Flaw
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...
CVE-2019-16251
CVE-2019-16251 affects the YIT Plugin Framework (plugin-fw/lib/yit-plugin-panel-wc.php) up to version 3.3.8 used by WordPress plugins, allowing authenticated users to change plugin options. Connected sources confirm this affects multiple YITH plugins (Order Tracking, Custom Thank You Page for Woo...
CVE-2019-16251
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...