wp-private-content-plus Plugin up to 1.x on WordPress Settings save_settings_page 7pk security

entryeditHistoryDiffjsonxmlCTI

A vulnerability has been found in wp-private-content-plus Plugin up to 1.x on WordPress (WordPress Plugin) and classified as critical. This vulnerability affects the function save_settings_page of the component Settings. Upgrading to version 2.0 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
9331319	08/10/2020	VulD...	cve_nvd_summary	The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.	mitre.org	08/10/2020	accepted	100
9331318	08/10/2020	VulD...	cve_assigned	1567036800	mitre.org	08/10/2020	accepted	100
9331312	08/10/2020	VulD...	cvss3_nvd_a	N	nist.gov	08/10/2020	accepted	100
9331311	08/10/2020	VulD...	cvss3_nvd_i	H	nist.gov	08/10/2020	accepted	100
9331310	08/10/2020	VulD...	cvss3_nvd_c	N	nist.gov	08/10/2020	accepted	100
9331309	08/10/2020	VulD...	cvss3_nvd_s	U	nist.gov	08/10/2020	accepted	100
9331308	08/10/2020	VulD...	cvss3_nvd_ui	N	nist.gov	08/10/2020	accepted	100
9331307	08/10/2020	VulD...	cvss3_nvd_pr	N	nist.gov	08/10/2020	accepted	100
9331306	08/10/2020	VulD...	cvss3_nvd_ac	L	nist.gov	08/10/2020	accepted	100
9331305	08/10/2020	VulD...	cvss3_nvd_av	N	nist.gov	08/10/2020	accepted	100
9331292	08/10/2020	VulD...	cvss2_nvd_ai	N	nist.gov	08/10/2020	accepted	100
9331291	08/10/2020	VulD...	cvss2_nvd_ii	P	nist.gov	08/10/2020	accepted	100
9331290	08/10/2020	VulD...	cvss2_nvd_ci	N	nist.gov	08/10/2020	accepted	100
9331289	08/10/2020	VulD...	cvss2_nvd_au	N	nist.gov	08/10/2020	accepted	100
9331288	08/10/2020	VulD...	cvss2_nvd_ac	L	nist.gov	08/10/2020	accepted	100
9331287	08/10/2020	VulD...	cvss2_nvd_av	N	nist.gov	08/10/2020	accepted	100
9331277	08/10/2020	VulD...	cwe	254 (privilege escalation)		08/10/2020	accepted	100
9331271	08/10/2020	VulD...	type	WordPress Plugin		08/10/2020	accepted	100
9331326	08/31/2019	VulD...	cvss3_nvd_basescore	7.5	nist.gov	08/31/2019	accepted	90
9331325	08/31/2019	VulD...	cvss3_vuldb_rc	X		08/31/2019	accepted	90