Lucene search
WpvulndbWPVDB-ID:9D10213A-2EFD-4562-90E3-4EFB2DE0E903HistoryNov 16, 2023 - 12:00 a.m.
ImageMapper <= 1.2.6 - Subscriber+ Arbitrary Post Deletion
2023-11-1600:00:00
wpscan.com
10
imagemapper
authenticated user
arbitrary posts
Description The plugin does not authoring in its imgmap_delete_area_ajax AJAX action, allowing any authenticated users, such as subscriber to delete arbitrary posts and pages
Related
cve
cve
CVE-2023-5506
2023-11-07 11:15:11
prion
prion
Design/Logic Flaw
2023-11-07 11:15:00
nvd
nvd
CVE-2023-5506
2023-11-07 11:15:11
cvelist
cvelist
CVE-2023-5506
2023-11-07 11:01:44
wordfence
wordfence
8.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.2%
Related for WPVDB-ID:9D10213A-2EFD-4562-90E3-4EFB2DE0E903