Weblizar Pin It Button On Image Hover And Post < 3.4 - Authorization Bypass
mediumThe Weblizar Pin It Button On Image Hover And Post plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'SaveSettings' function in versions up to, and including, 3.3. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change...
- CVSS:
- 5.4
- Affected:
- up to 3.4
- Fixed in:
- 3.4
- Disclosed:
- Apr 4, 2022