Lucene search
+L

1 matches found

Patchstack
Patchstack
added 2026/03/23 6:05 p.m.18 views

WordPress Punnel plugin <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update via 'punnel_save_config' AJAX Action vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Update via 'punnelsaveconfig' AJAX Action vulnerability discovered by Poli - CMC Global in WordPress Plugin Punnel – Landing Page Builder versions = 1.3.1...

5.3CVSS5.8AI score0.00292EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder