Skip to content
OpenAdvisories

Vendor

devsabbirahmed

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Firebase Support & Chat Management <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

    The Firebase Support & Chat Management plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.1.1. This is due to the `firebase_auth()` function authenticating the request as the WordPress user whose email is suppli…