WordPress Console <= 0.3.9 - Missing Authorization via reload.php
mediumThe WordPress Console plugin for WordPress is vulnerable to unauthorized modification of data and execution of files due to missing authorization in several files such as reload.php, complete.php, and query that is also missing direct file access controls in versions up to, and including, 0.3.9. This makes it possible...
- CVSS:
- 5.3
- Affected:
- up to 0.3.9
- Fix:
- No patched version reported
- Disclosed:
- Mar 14, 2023