Lucene search

K
wpvulndbWpvulndbWPVDB-ID:9401372F-74FF-448C-8AAF-58CFD6D72083
HistoryNov 23, 2023 - 12:00 a.m.

Animator < 3.0.11 - Missing Authorization to Plugin Settings Update

2023-11-2300:00:00
wpscan.com
3
wordpress
vulnerability
unauthorized access

6.9 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Description The Animator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sta_update_options() function in versions up to, and including, 3.0.10. This makes it possible for subscribers to modify the plugin’s settings. Version 3.0.9 used to provide a nopriv action hook, which allowed unauthenticated individuals to perform this task.

CPENameOperatorVersion
eq3.0.11

6.9 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Related for WPVDB-ID:9401372F-74FF-448C-8AAF-58CFD6D72083