WP-MUI – Mass User Input – Add and Export WP Users Quickly <= 1.8 - Missing Authorization
mediumThe WP-MUI – Mass User Input – Add and Export WP Users Quickly plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various functions found in the ~/core/ajax_handler.php file in versions up to, and including, 1.8. This makes it possible for authenticated attackers with subscri...
- CVSS:
- 6.3
- Affected:
- up to 1.8
- Fix:
- No patched version reported
- Disclosed:
- Aug 5, 2022