CVE-2022-4703 in Royal Elementor Addons Plugin信息

摘要

由 MITRE • 2023-01-10

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_import' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to reset previously imported data.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Wordfence

预定

2022-12-23

披露

2023-01-10

管理

已接受

条目

VDB-217895

CPE

准备好

CWE

CWE-284 (已确认)

利用

下载

CVSS

8.1 (NVD)

EPSS

0.00945

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-4703
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-4703
CVE Details	https://www.cvedetails.com/cve/CVE-2022-4703/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!