Vulners
Lucene search
2 matches found
CVE-2022-1323
The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discyupdateoptions action, allowing any logged in users with privileges as low as Subscriber, to change Theme options by sending a crafted POST request...
6.5CVSS5.8AI score0.00319EPSS
Exploits2References1
Authorization
The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discyupdateoptions action, allowing any logged in users with privileges as low as Subscriber, to change Theme options by sending a crafted POST request...
4CVSS6.4AI score0.00319EPSS
Exploits2References1Affected Software1
20