Lucene search

K
wpvulndbWpvulndbWPVDB-ID:5567E080-7A58-4524-A55E-9968329F8143
HistoryMay 07, 2024 - 12:00 a.m.

WP Media folder < 5.7.3 - Missing Authorization to Authenticated(Subscriber+) Title Modification

2024-05-0700:00:00
wpscan.com
10
wordpress
media folder
vulnerability
unauthorized modification
data
capability check
authentication
subscriber access

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

9.0%

Description The wp-media-folder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on an unknown function in all versions up to, and including, 5.7.2. This makes it possible for authenticated attackers, with subscriber access and above, to modify titles of posts and pages.

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:5567E080-7A58-4524-A55E-9968329F8143