Lucene search

K
wpvulndbWpvulndbWPVDB-ID:0A88F201-CF6C-42BD-85FB-5EEC50CB9FF1
HistoryNov 23, 2023 - 12:00 a.m.

Essential Grid < 3.0.19 - Missing Authorization

2023-11-2300:00:00
wpscan.com
8
wordpress
essential grid
vulnerability

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Essential Grid plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in versions up to, and including, 3.0.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to access those functions intended for higher privileged users. The exact consequences are not known.

CPENameOperatorVersion
eq3.0.19

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:0A88F201-CF6C-42BD-85FB-5EEC50CB9FF1