WP Remote Users Sync < 1.2.12 - Subscriber+ Log Access

2023-08-1600:00:00

wpscan.com

plugin

authorisation

function

authenticated users

subscriber

logs

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.4%

JSON

Description The plugin does not have authorisation in the refresh_logs_async function, allowing any authenticated users, such as subscriber to view logs

CPENameOperatorVersion
eq1.2.12

CPE	Name	Operator	Version
		eq	1.2.12