Lucene search

K
wpvulndbA. SammanWPVDB-ID:C04FB575-81DF-47B6-90FB-AC6CA43C720B
HistoryJun 26, 2015 - 12:00 a.m.

Multiple Themes - Privilige Escalation

2015-06-2600:00:00
A. Samman
wpscan.com
6

EPSS

0.001

Percentile

44.1%

The themes suffer from a privilege escalation vulnerability, any authenticated user can trigger this vulnerability due to weak permissions checking. An attacker can update options, such as changing user’s default role, registration state and others, which may lead to executing commands/code on the server and taking over the website. Tested Versions: Simpolio 1.3.2 Pont 1.5 Teardrop 1.8.1 Vernissage 1.2.8

PoC

EPSS

0.001

Percentile

44.1%

Related for WPVDB-ID:C04FB575-81DF-47B6-90FB-AC6CA43C720B