Astra Bulk Edit < 1.2.8 - Missing Authorization

2023-11-2400:00:00

wpscan.com

astra bulk edit

wordpress

unauthorized access

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The Astra Bulk Edit plugin for WordPress is vulnerable to unauthorized missing authorization due to a missing capability check on the save_post_bulk_edit function in versions up to, and including, 1.2.7. This makes it possible for attackers with contributor-level access or higher to bulk edit posts.