Wbcom Designs Plugins (Various Versions) - Arbitrary Plugin Installation, Activation and Deactivation
mediumSeveral WordPress plugins by Wbcom Designs were vulnerable to arbitrary plugin installation, activation and deactivation due to missing authorization checks on the wp_ajax_wbcom_manage_plugin_installation AJAX action function wbcom_do_plugin_action.
- CVSS:
- 6.3
- Affected:
- up to 1.9.9
- Fixed in:
- 1.9.9
- Disclosed:
- Apr 13, 2022