Lucene search

K

WpvulndbWPVDB-ID:35570703-9DB4-486D-8B56-7DABFC89275F

HistoryFeb 05, 2024 - 12:00 a.m.

PowerPack Pro for Elementor < 2.10.8 - Missing Authorization to Settings Reset

2024-02-0500:00:00

wpscan.com

11

powerpack pro

elementor

wordpress

vulnerability

unauthorized modification

AI Score

6.4

Confidence

High

Description The PowerPack Pro for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in all versions up to, and including, 2.10.6. This makes it possible for unauthenticated attackers to reset plugin settings.

References

www.wordfence.com/threat-intel/vulnerabilities/id/883e1f3c-7e47-4522-ae8c-a9a6b4160be2

AI Score

6.4

Confidence

High

Related for WPVDB-ID:35570703-9DB4-486D-8B56-7DABFC89275F