Description
The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on scheduled posts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Page Builder: Pagelayer | 1.3.2 – < 1.7.7 | 1.7.7 |
References
- https://wpscan.com/vulnerability/31596fc5-4203-40c4-9b0a-e8a37faafddd exploit vdb-entry technical-description