Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B3CBA673-036E-462A-AD10-E94E509F0FB1
HistoryNov 23, 2023 - 12:00 a.m.

Betheme < 27.1.2 - Missing Authorization

2023-11-2300:00:00
wpscan.com
7
betheme
wordpress
vulnerability
unauthorized access
version 27.1.1

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Betheme theme for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on one of its functions in versions up to, and including, 27.1.1. This makes it possible for authenticated attackers, with contributor-level access and above, to invoke this function.

CPENameOperatorVersion
eq27.1.2

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:B3CBA673-036E-462A-AD10-E94E509F0FB1