Aller au contenu
Se connecter
Non notée

CVE-2021-24717 The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber…

Description

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions.

Produits et versions touchés

Produit Versions touchées Corrigé en
AutomatorWP 1.7 premières → < 1.7.6 1.7.6

Autres CVE de AutomatorWP

Les 2 CVE de AutomatorWP →
CVE-2026-118239 AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth Callback 5.6 Moyenne
Suivre cette CVE