Skip to content
OpenAdvisories

Vendor

pubjet

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.6

    Pubjet | پاب‌جت <= 5.4.8 - Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX Action

    The Pubjet | پاب‌جت plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.4.8. This is due to the `checkToken()` AJAX handler — registered under `wp_ajax_pubjet-check-token` — performing no capability check and no …

  • High 7.6

    WordPress Pubjet | پاب‌جت plugin <= 5.4.8 - Settings Change vulnerability

    Missing Authorization vulnerability in pubjet Pubjet | پاب‌جت pubjet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pubjet | پاب‌جت: from n/a through 5.4.8.