Design/Logic Flaw

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...

CVE-2019-16251

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...

CVE-2019-16251

CVE-2019-16251 affects the YIT Plugin Framework (plugin-fw/lib/yit-plugin-panel-wc.php) up to version 3.3.8 used by WordPress plugins, allowing authenticated users to change plugin options. Connected sources confirm this affects multiple YITH plugins (Order Tracking, Custom Thank You Page for Woo...

PT-2019-14601

Name of the Vulnerable Software and Affected Versions YIT Plugin Framework versions prior to 3.3.9 Description The issue allows authenticated options changes, potentially leading to unauthorized modifications. Recommendations For versions prior to 3.3.9, update to version 3.3.9 or later to resolv...

CVE-2019-16251: Undefined Security Weakness

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...