Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results <= 1.1.0 - Missing Authorization to Arbitrary Options Update
highThe Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.1.0. This is due to missing capability and nonce checks on the Hub2Word_save_settings function. This makes it possible for authenticated...
- CVSS:
- 8.8
- Affected:
- up to 1.1.0
- Fix:
- No patched version reported
- Disclosed:
- Feb 16, 2022