Description
The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_options action, allowing any logged in users (with privileges as low as Subscriber,) to change Theme options by sending a crafted POST request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Discy | < 5.0 | 5.0 |
References
- https://wpscan.com/vulnerability/2d8020e1-6489-4555-9956-2dc190aaa61b exploit vdb-entry technical-description