Aller au contenu
Se connecter
Non notée

CVE-2021-24703 The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the…

Description

The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed.

Produits et versions touchés

Produit Versions touchées Corrigé en
Download Plugin 1.6 premières → < 1.6.1 1.6.1

Autres CVE de Download Plugin

Les 2 CVE de Download Plugin →
CVE-2021-25059 The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to… 5.4 Moyenne
Suivre cette CVE