CVE-2024-34442 WordPress weDocs plugin <= 2.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4...

CVE-2024-34442 WordPress weDocs plugin <= 2.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4...

CVE-2024-34442

CVE-2024-34442 is a Missing Authorization vulnerability in the WordPress weDocs plugin (affected: weDocs

WordPress plugin weDocs security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

weDocs < 2.1.5 - Missing Authorization

Description The weDocs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatehelpfullness REST API endpoint in versions up to, and including, 2.1.4. This makes it possible for unauthenticated attackers to update settings...

WordPress weDocs plugin <= 2.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin weDocs versions = 2.1.4...

WordPress weDocs Plugin <= 2.1.4 is vulnerable to Broken Access Control

Software weDocs Type Plugin Vulnerable versions = 2.1.4 Fixed in 2.1.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34442 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9f7c973edf5a Credits Peng Zhou Required privilege...

WordPress weDocs Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software weDocs Type Plugin Vulnerable versions = 1.7.5 Fixed in 1.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 045d8faa126e Credits István Márton Required...