Lucene search
WpvulndbWPVDB-ID:DFC80C97-5AED-46A5-80ED-1864555C4E76HistoryJan 03, 2024 - 12:00 a.m.
WC Marketplace < 4.0.24 - Missing Authorization via mvx_save_dashpages
2024-01-0300:00:00
wpscan.com
10
wordpress
vulnerability
missing capability check
plugin settings
unauthenticated attackers
AI Score
7
Confidence
Low
Description The WC Marketplace plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ‘mvx_save_dashpages’ function in versions up to, and including, 4.0.23. This makes it possible for unauthenticated attackers to update the plugin’s settings.
Related
wordfence
wordfence