2 matches found
CVE-2022-38058 WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability
Authenticated subscriber+ Plugin Setting change vulnerability in WP Shamsi plugin = 4.1.1 at WordPress...
CVE-2022-38058
WP Shamsi plugin for WordPress is affected up to version 4.1.1 by an authenticated settings-change vulnerability. The root cause is missing authorization checks on plugin settings changes, allowing a subscriber+ to modify settings. Remediation: update to a version greater than 4.1.1 (Patch guidan...