Skip to content
OpenAdvisories

Vendor

framework-y

1 known vulnerabilities.

Products

Hybrid Composer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-25738

    WordPress Hybrid Composer 1.4.6 Unauthenticated Settings Change

    WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option action. Attackers can send POST requests to the admin-ajax.php en…

    framework-y Hybrid Composer