SALERT < 1.2.2 - Subscriber+ Missing Authorization

🗓️ 09 May 2023 00:00:00Reported by wpvulndbType

SALERT plugin vulnerable to unauthorized data modification due to missing capability check on salert_save_settings_with_ajax() function

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2023-32126 WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability	9 Dec 202411:30	–	vulnrichment
Patchstack	WordPress SALERT Plugin <= 1.2.1 is vulnerable to Broken Access Control	9 May 202300:00	–	patchstack
NVD	CVE-2023-32126	9 Dec 202413:15	–	nvd
Cvelist	CVE-2023-32126 WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability	9 Dec 202411:30	–	cvelist
CVE	CVE-2023-32126	9 Dec 202413:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 8, 2023 to May 14, 2023)	18 May 202312:45	–	wordfence

Vulners

Node

-salertRange<1.2.2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 May 2023 00:00Current

10High risk

Vulners AI Score10

EPSS0.0004