Lucene search

K
wpvulndbWpvulndbWPVDB-ID:76213AFE-8521-4751-8125-308DAA136E24
HistoryOct 24, 2022 - 12:00 a.m.

SearchWP < 4.2.6 - Subscriber+ Settings Update

2022-10-2400:00:00
wpscan.com
14
searchwp
plugin
update
vulnerability
settings
authentication
users

EPSS

0.001

Percentile

22.7%

The plugin does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them

EPSS

0.001

Percentile

22.7%

Related for WPVDB-ID:76213AFE-8521-4751-8125-308DAA136E24