Newspack Content Converter <= 0.1.5 - Missing Authorization
mediumThe Newspack Content Converter plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on several REST API endpoints in versions up to, and including, 0.1.5. This makes it possible for authenticated attackers, with contributor-level access and above, to edit other...
- CVSS:
- 4.3
- Affected:
- up to 0.1.5
- Fixed in:
- 1.0.0
- Disclosed:
- Jul 1, 2024