Vendor
peterschulznl
11 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5CVE-2023-1874 Public exploit
WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation
The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. This is due to a lack of authorization checks on the multiple_roles_update function. This makes it possible for authenticated attackers, wit…