Lucene search
+L

2 matches found

VulnCheck KEV
VulnCheck KEV
•added 2023/02/03 12:00 a.m.•34 views

VulnCheck KEV: CVE-2022-4701

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredplugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...

8.8CVSS7.6AI score0.00762EPSS
SaveIn wildExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•6 views

CVE-2022-4701: Improper Authorization

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredplugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...

8.8CVSS5.7AI score0.00762EPSS
SaveExploits1References2
Rows per page
Query Builder