Lucene search
+L
ValvepressWordpress Automatic Plugin3.53.2

1 matches found

CVE
CVE
added 2023/06/07 1:51 a.m.72 views

CVE-2021-4374

CVE-2021-4374 affects WordPress Automatic Plugin versions up to 3.53.2. The root cause is missing authorization and option validation in process_form.php, allowing unauthenticated users to update arbitrary WordPress options (via update_option()) and potentially compromise the site. The nuclei tem...

9.8CVSS9.2AI score0.16408EPSS
SaveIn wildWeb