Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update
mediumMultiple ServMask Plugins for WordPress are vulnerable to unauthorized modification of data due to a missing capability check on the init() function hooked via admin_init in various versions. This makes it possible for unauthenticated attackers to modify the access token which could result in sensitive information disc...
- CVSS:
- 5.3
- Affected:
- up to 2.79
- Fixed in:
- 2.80
- Disclosed:
- Aug 30, 2023