6 matches found
WordPress Authorization Issue Vulnerability (CNVD-2021-36539)
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . An authorization issue vulnerability exists in versions o...
Code injection
Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...
CVE-2021-24190 WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...
CVE-2021-24190
CVE-2021-24190 affects the WooCommerce Conditional Marketing Mailer WordPress plugin prior to version 1.5.2. Low-privilege users can exploit the AJAX action cp_plugins_do_button_job_later_callback to install any plugin (including specific versions) from the WordPress repository and to activate ar...
WordPress plugin WooCommerce Conditional Marketing Mailer 安全漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . An authorization issue vulnerability exists in versions o...
WordPress Conditional Marketing Mailer for WooCommerce plugin <= 1.5.1 - Arbitrary Plugin Installation and Activation vulnerability
Arbitrary Plugin Installation and Activation vulnerability discovered by Bugbang in WordPress Conditional Marketing Mailer for WooCommerce plugin versions = 1.5.1. Solution Update the WordPress Conditional Marketing Mailer for WooCommerce plugin to the latest available version at least 1.5.2...