Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C503B500-FB8B-4CA3-9A2A-DE0BC9562B2C
HistoryFeb 09, 2024 - 12:00 a.m.

Royal Elementor Addons and Templates < 1.3.88 - Missing Authorization via wpr_update_form_action_meta

2024-02-0900:00:00
wpscan.com
5
wordpress
vulnerable
unauthorized update
post metadata
attack

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due to a missing capability check on the wpr_update_form_action_meta function in all versions up to, and including, 1.3.87. This makes it possible for unauthenticated attackers to update certain metadata.

CPENameOperatorVersion
eq1.3.88

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:C503B500-FB8B-4CA3-9A2A-DE0BC9562B2C