Lucene search
+L

2 matches found

NVD
NVD
added 2024/01/11 7:15 a.m.28 views

CVE-2023-6883

The Easy Social Feed plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 6.5.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

4.3CVSS4.3AI score0.00321EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/11 6:49 a.m.41 views

CVE-2023-6883 Easy Social Feed <= 6.5.2 - Missing Authorization to Settings Modification

The Easy Social Feed plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 6.5.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

4.3CVSS4.7AI score0.00321EPSS
SaveExploits0References2
Rows per page
Query Builder