Lucene search
+L

2 matches found

attackerkb
attackerkb
•added 2023/01/10 5:15 p.m.•17 views

CVE-2022-4700

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredtheme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...

8.8CVSS7.1AI score0.00811EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•2 views

CVE-2022-4700: Improper Access Control

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredtheme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...

8.8CVSS5.5AI score0.00811EPSS
SaveExploits1References2
Rows per page
Query Builder