CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - فقدان التصريح عبر activateplugin الوصف قالب Square لووردبريس عرضة لتفعيل إضافات غير مصرح به بسبب عدم وجود فحص صلاحيات على دالة activateplugin التي يتم استدعاؤها عبر إجراء AJAX في الإصدارات حتى 2.0.0 وما يشملها. وهذا يتيح للمهاجمين المصادقين، ممن لديهم صلاحيات مستوى...

CVE-2023-30486 WordPress Square theme <= 2.0.0 - Broken Access Control

Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0...

CVE-2023-30486 WordPress Square theme <= 2.0.0 - Broken Access Control

Missing Authorization vulnerability in hashthemes Square square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through = 2.0.0...

CVE-2023-30486

CVE-2023-30486 refers to WordPress Square theme vulnerability (

Exploit for CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Missing Authorization via...

WordPress Square Theme <= 2.0.0 is vulnerable to Broken Access Control

Software Square Type Theme Vulnerable versions = 2.0.0 Fixed in 2.0.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30486 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6813b5262bc4 Credits Dave Jong Patchstack Required privilege...