Lucene search

K
wpvulndbWpvulndbWPVDB-ID:87EF49D6-D54C-425C-96CC-D63772083DDD
HistoryFeb 05, 2024 - 12:00 a.m.

Quicksand Post Filter jQuery Plugin <= 3.1.1 - Missing Authorization via quicksand_admin_ajax

2024-02-0500:00:00
wpscan.com
5
quicksand post filter
jquery plugin
wordpress
vulnerability
unauthorized
data deletion
capability check
quicksand_admin_ajax

AI Score

5.9

Confidence

High

EPSS

0

Percentile

9.0%

Description The Quicksand Post Filter jQuery Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ‘quicksand_admin_ajax’ function in versions up to, and including, 3.1.1. This makes it possible for unauthenticated attackers to delete arbitrary site options.

AI Score

5.9

Confidence

High

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:87EF49D6-D54C-425C-96CC-D63772083DDD