Lucene search

K
wpvulndbWpvulndbWPVDB-ID:AEA5A0FD-6D83-4EC5-BAD8-203DD4CCDCB6
HistoryNov 03, 2023 - 12:00 a.m.

Grid Plus < 1.3.3 - Subscriber+ Grid Layout Creation/Deletion/Update

2023-11-0300:00:00
wpscan.com
8
plugin
capability checks
unauthorized operations
grid layout
authenticated users

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.2%

Description The plugin does not properly implement capability checks on the ‘grid_plus_save_layout_callback’ and ‘grid_plus_delete_callback’ functions, leading to unauthorized creation, deletion and update of grid layout by any authenticated users, such as subscriber

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.2%

Related for WPVDB-ID:AEA5A0FD-6D83-4EC5-BAD8-203DD4CCDCB6