2 matches found
CVE-2020-36714
The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the isadministrator function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions...
8.1CVSS7.4AI score0.00425EPSS
SaveExploits1References2
CVE-2020-36714
The Brizy plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 1.0.125 . The root cause is an incorrect capability check within the is_administrator() function, which allows authenticated attackers to bypass security restrictions and interact with availabl...
8.1CVSS7.7AI score0.00425EPSS
SaveIn wildExploits1References2Affected Software1
20