Lucene search
WpvulndbWPVDB-ID:B123BB35-EA43-4979-8177-359ABE87D244HistoryMay 23, 2023 - 12:00 a.m.
Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Incorrect Authorization leading to Arbitrary File Upload
2023-05-2300:00:00
wpscan.com
4
wordpress
pricing tables
authorization
arbitrary file upload
security
0.004 Low
EPSS
Percentile
73.0%
The plugin lacks proper authorization on the file upload feature, making it possible for authenticated users, who belong to specific roles defined by the administrator, to upload arbitrary files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go_pricing | lt | 3.4 |
Related
nvd
nvd
CVE-2023-2496
2023-05-24 00:15:09
cve
cve
CVE-2023-2496
2023-05-24 00:15:09
cvelist
cvelist
CVE-2023-2496
2023-05-23 23:36:47
prion
prion
Input validation
2023-05-24 00:15:00
wordfence
wordfence
2023’s Critical WordPress Vulnerabilities and How They Work
2024-02-12 19:11:21