Lucene search

K
wpvulndbWpvulndbWPVDB-ID:38D23ED9-E723-4BB1-A3BE-EC452EDE7064
HistoryNov 23, 2023 - 12:00 a.m.

Podlove Web Player <= 5.7.3 - Missing Authorization

2023-11-2300:00:00
wpscan.com
9
podlove web player
wordpress
vulnerable
unauthorized access
missing capability check

AI Score

8.5

Confidence

High

EPSS

0

Percentile

9.0%

Description The Podlove Web Player plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on an unknown function in versions up to, and including, 5.7.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.

AI Score

8.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:38D23ED9-E723-4BB1-A3BE-EC452EDE7064