Lucene search
WpvulndbWPVDB-ID:F95686F7-B9F8-46E1-9890-3C37055BEE66HistoryNov 23, 2023 - 12:00 a.m.
Ashe Extra <= 1.2.9 - Subscriber+ Companion Plugin Activation & Content Import
2023-11-2300:00:00
wpscan.com
9
plugin
ajax
authorisation
user
companion plugins
import
content
AI Score
6.4
Confidence
High
Description The plugin does not have authorisation in various AJAX actions, allowing any authenticated user, such as subscribers to call them, and activate companion plugins as well as import content
Related
wordfence
wordfence