Non notée
CVE-2023-0328 The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only…
Description
The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication (such as update and delete the auth key).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WPCode 2.0 | premières → < 2.0.7 | 2.0.7 |
Autres CVE de WPCode
Les 4 CVE de WPCode →
CVE-2026-101301
The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen…
5.3
Moyenne
CVE-2023-3524
The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading…
6.1
Moyenne
CVE-2023-1624
The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be…
6.5
Moyenne