Lucene search

K
wpvulndbWpvulndbWPVDB-ID:8CBB9FD4-C1CF-4EC4-89C6-A0BFFF1029B6
HistoryNov 23, 2023 - 12:00 a.m.

Responsive Tabs < 4.0.6 - Authenticated (Contributor+) Content Injection

2023-11-2300:00:00
wpscan.com
2
wordpress
vulnerable
arbitrary content injection
authenticated
contributor-level permissions

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Responsive Tabs plugin for WordPress is vulnerable to Arbitrary Content Injection in versions prior to 4.0.6. This vulnerability makes it possible for authenticated attackers, with contributor-level permissions and above, to inject new content onto the website, possibly through the manipulation of posts to create new web pages, spam, or phishing.

CPENameOperatorVersion
eq4.0.6

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:8CBB9FD4-C1CF-4EC4-89C6-A0BFFF1029B6