5 matches found
CVE-2020-36852
The Custom Searchable Data Entry System plugin for WordPress (versions up to and including 1.7.1 ) is vulnerable to unauthenticated database wiping . The root cause is a missing capability check and insufficient validation within the ghazale_sds_delete_entries_table_row() function. This flaw allo...
CVE-2020-36852 Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping
The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...
CVE-2020-36852: Missing Authorization
The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...
CVE-2020-36333
The themegrill-demo-importer WordPress plugin versions prior to 1.6.2 (specifically versions 1.3.4 and above and versions 1.6.1 and below) contain an access control vulnerability. Due to a reset_wizard_actions hook that lacks authentication requirements, unauthenticated attackers can wipe the ent...