Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
WoostifySites Library

1 matches found

CVE
CVE•added 2024/01/29 2:44 p.m.•52 views

CVE-2023-6279

CVE-2023-6279 affects Woostify Sites Library (WordPress plugin) versions before 1.4.8. The issue is broken access control in an AJAX action: authenticated users (e.g., subscribers) can update arbitrary blog options and set them to ‘activated’, which the sources describe as potentially leading to ...

7.1CVSS7AI score0.00493EPSS
Web