Lucene search
WpvulndbWPVDB-ID:1F78D0B3-C077-4A57-B33A-92A22C98983CHistoryJul 27, 2023 - 12:00 a.m.
InstaWP Connect < 0.0.9.19 - Unauthenticated Data Modification
2023-07-2700:00:00
wpscan.com
4
plugin
authorisation check
events_receiver
unauthenticated users
posts/taxonomy
plugin installation
customizer settings
arbitrary users
software
Description The plugin does not have authorisation check in its events_receiver function, allowing unauthenticated users to create/update/delete posts/taxonomy, install/activate/deactivate plugin, update the customizer settings as well as create/update/delete arbitrary users
| CPE | Name | Operator | Version |
|---|---|---|---|
| instawp-connect | eq | 0.0.9.19 |
Related
nvd
nvd
CVE-2023-3956
2023-07-27 07:15:09
cvelist
cvelist
CVE-2023-3956
2023-07-27 06:54:14
cve
cve
CVE-2023-3956
2023-07-27 07:15:09
prion
prion
Design/Logic Flaw
2023-07-27 07:15:00
wordfence
wordfence
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.8%
Related for WPVDB-ID:1F78D0B3-C077-4A57-B33A-92A22C98983C