LightStart < 2.6.9 - Subscriber+ Page design Update

2024-01-0500:00:00

wpscan.com

plugin

vulnerable

data modification

authenticated attackers

page designs

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the insert_template function, allowing authenticated attackers, with subscriber-level access and above, to change page designs.

CPENameOperatorVersion
eq2.6.9

CPE	Name	Operator	Version
		eq	2.6.9

References

www.wordfence.com/threat-intel/vulnerabilities/id/b57d3d1d-dcdb-4f11-82d8-183778baa075