Fantastic Content Protector Free <= 2.6 - Missing Authorization via update_setting_fantastic_content_protector
mediumThe Fantastic Content Protector Free plugin for WordPress is vulnerable to unauthorized plugin settings reset due to a missing capability check on the update_setting_fantastic_content_protector function in versions up to, and including, 2.6. This makes it possible for unauthenticated attackers to reset this plugin's se...
- CVSS:
- 5.3
- Affected:
- up to 2.6
- Fix:
- No patched version reported
- Disclosed:
- Apr 13, 2023