Lucene search
WpvulndbWPVDB-ID:83ABF68D-57CC-4EC7-986C-6AC2B691CA6CHistoryNov 23, 2023 - 12:00 a.m.
WP Crowdfunding < 2.1.5 - Missing Authorization via settings_reset
2023-11-2300:00:00
wpscan.com
3
wordpress
crowdfunding
vulnerability
unauthorized access
settings reset
6.7 Medium
AI Score
Confidence
Low
Description The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized settings reset due to a missing capability check on the settings_reset function in versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to reset plugin settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.1.5 |
Related
wordfence
wordfence