OnePress Opt-In Panda <= 2.6.2 - Missing Authorization on AJAX Actions
mediumThe OnePress Opt-In Panda plugin for WordPress is vulnerable to unauthorized modification of settings and retrieval of plugin settings due to missing capability checks on various AJAX actions in versions up to, and including 2.6.2.
- CVSS:
- 6.3
- Affected:
- up to 2.6.2
- Fix:
- No patched version reported
- Disclosed:
- Jun 15, 2022