WP Clinic
Log in Sign up

CVE · High

CVE-2022-43453 — WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log [wptools] < 3.43 (closed)

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-43453 WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log [wptools] < 3.43 (closed) Missing Authorization High 8.8 < 3.43 3.43 2022-11-30

CVE-2022-43453

The WP Tools plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.41. This is due to missing capability check resulting in authorization bypass. This makes it possible for subscriber-level attackers to access unspecified user controls granted at a higher authorization-level.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.