Skip to content
OpenAdvisories

Vendor

FlyingWeb

1 known vulnerabilities.

Products

FlyingPress 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2022-4948

    FlyingPress <= 3.9.6 - Missing Authorization

    The FlyingPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 3.9.6. This makes it possible for authenticated attackers, with subscriber-level permissions and…

    FlyingWeb FlyingPress Web / CMS