WiserNotify Social Proof <= 2.5 - Missing Authorization
mediumThe WiserNotify Social Proof plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the varify_api() function hooked via an AJAX action in versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to trigger API verification.
- CVSS:
- 5.3
- Affected:
- up to 2.5
- Fixed in:
- 2.6
- Disclosed:
- Sep 4, 2023