Description
The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0. This makes it possible for unauthenticated attackers to add, modify, or plugin options.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Potenza Global Solutions | PGS Core | ≤ 5.8.0 | — |