logo
DATABASE RESOURCES PRICING ABOUT US

AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation

Description

The plugin does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions.


Related