Stylish Price List < 7.0.18 - Missing Authorization

2024-01-0400:00:00

wpscan.com

wordpress

unauthorized modification

data loss

capability check

contributor access

duplication

deletion

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.3%

JSON

Description The Stylish Price List plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on multiple functions in versions up to, and including, 7.0.17. This makes it possible for authenticated attackers, with contributor-level access and above, to duplicate and delete price lists.