Lucene search

K
wpvulndbWpvulndbWPVDB-ID:3399B6CD-9D5D-4E36-A527-F0A73897EE0C
HistoryNov 24, 2023 - 12:00 a.m.

Starter Templates <= 3.2.5 - Incorrect Authorization

2023-11-2400:00:00
wpscan.com
2
wordpress
starter templates
vulnerability
unauthorized access

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Starter Templates (free and premium) plugin for WordPress is vulnerable to unauthorized modification of data due to an incorrect capability check on the sse_import() function in versions up to, and including, 3.2.5. This makes it possible for authenticated attackers, with contributor-level access and above, to import plugin/template data.

CPENameOperatorVersion
eq3.2.6
eq3.2.6

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:3399B6CD-9D5D-4E36-A527-F0A73897EE0C