| ID | CVE-2020-36730 | ||||||
| Sažetak | The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for unauthenticated attackers to read posts, export subscriber lists, and/or deactivate the plugin. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H | ||||||
| Zadnje važnije ažuriranje | 07-11-2023 - 03:22 | ||||||
| Objavljeno | 07-06-2023 - 02:15 |
