2 matches found
CVE-2017-18584
The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.
CVE-2017-18583
The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.