Lucene search

K

WpvulndbWPVDB-ID:103908D2-670F-425D-8473-515438EFC1C9

HistoryDec 08, 2023 - 12:00 a.m.

LadiApp <= 4.4 - Missing Authorization

2023-12-0800:00:00

wpscan.com

4

ladiapp vulnerability

missing authorization

data modification

9.1 High

AI Score

Confidence

High

Description The plugin is vulnerable to unauthorized access of data, modification of data, or loss of data due to a missing capability check on an unknown function This makes it possible for authenticated attackers, with subscriber-level access and above, to make use of the unprotected functionality.

References

patchstack.com/database/vulnerability/ladipage/wordpress-ladiapp-plugin-4-3-broken-access-control-lead-to-xss-vulnerability

9.1 High

AI Score

Confidence

High

Related for WPVDB-ID:103908D2-670F-425D-8473-515438EFC1C9