360 Javascript Viewer < 1.7.12 - Unauthenticated Settings Update

2023-12-0200:00:00

wpscan.com

javascript

viewer

unauthenticated

settings

update

9.4 High

AI Score

Confidence

High

Description The plugin does not have authorisation check when updating its settings, which could allow unauthenticated users to update them

CPENameOperatorVersion
eq1.7.12

CPE	Name	Operator	Version
		eq	1.7.12

References

patchstack.com/database/vulnerability/360deg-javascript-viewer/wordpress-360-javascript-viewer-plugin-1-7-11-broken-access-control-vulnerability

9.4 High

AI Score

Confidence

High

Related for WPVDB-ID:51779870-5974-4647-BB4D-20E3CAA6659B