WP Clinic
Entrar Registrarse

CVE · High

CVE-2022-43453 — WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log [wptools] < 3.43 (closed)

CVE Vulnerabilidad Tipo Gravedad Afectadas Corregido en Publicado Estado
CVE-2022-43453 WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log [wptools] < 3.43 (closed) Falta de control de autorización Alta 8,8 < 3.43 3.43 2022-11-30

CVE-2022-43453

The WP Tools plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.41. This is due to missing capability check resulting in authorization bypass. This makes it possible for subscriber-level attackers to access unspecified user controls granted at a higher authorization-level.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Escanea tu sitio WordPress gratis

Sin registro, sin tarjeta de crédito — ingresa tu URL y obtén un informe de seguridad en segundos.