CVE-2019-16251

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...

CVE-2019-16251

CVE-2019-16251 affects the YIT Plugin Framework (plugin-fw/lib/yit-plugin-panel-wc.php) up to version 3.3.8 used by WordPress plugins, allowing authenticated users to change plugin options. Connected sources confirm this affects multiple YITH plugins (Order Tracking, Custom Thank You Page for Woo...