Description
The RealPress WordPress plugin before 1.1.0 registers the REST routes without proper permission checks, allowing the creation of pages and sending of emails from the site.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | RealPress | < 1.1.0 | 1.1.0 |
References
- https://wpscan.com/vulnerability/74f19ff2-d5c0-4bd4-83f2-688ea37022b1/ exploit vdb-entry technical-description