Beveiligingsadvies

CVE-2023-2495

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-10 12:40:36

Laatst bijgewerkt 2024-11-12 14:03:06

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Greeklish-permalink WordPress plugin through 3.3 does not implement correct authorization or nonce checks in the cyrtrans_ajax_old AJAX action, allowing unauthenticated and low-privilege users to trigger the plugin's functionality to change Post slugs either directly or through CSRF.

← Alle CVE's bekijken Bekijk op cve.org ↗