Beveiligingsadvies

CVE-2023-1624

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-24 18:30:56

Laatst bijgewerkt 2025-02-04 17:20:37

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders

← Alle CVE's bekijken Bekijk op cve.org ↗