Lucene search
+L

42 matches found

wpexploit
wpexploit
added 2019/03/01 12:0 a.m.7 views

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

Description The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options As any authenticated user: Enable new user registrations:...

7.2AI score
SaveExploits0References4
WPVulnDB
WPVulnDB
added 2019/03/01 12:0 a.m.47 views

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

Description The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options PoC As any authenticated user: Enable new user registrations:...

7.1AI score
SaveExploits0References4
Rows per page
Query Builder