CVE-2021-4381 in uListing Plugin信息

摘要

由 MITRE • 2023-06-07

The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks, and a missing security nonce, in the StmListingSingleLayout::import_new_layout method in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to change any WordPress option in the database.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Wordfence

预定

2023-06-06

披露

2023-06-07

管理

已接受

条目

VDB-230969

CPE

准备好

CWE

CWE-862 (已确认)

CVSS

9.8 (NVD)

EPSS

0.01400

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2021-4381
NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-4381
CVE Details	https://www.cvedetails.com/cve/CVE-2021-4381/

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!