The Hostinger plugin for WordPress... CVE-2023-6751

- AV AC AU C I A
发布: 2024-01-11
修订: 2024-01-18

The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the function publish_website in all versions up to, and including, 1.9.7. This makes it possible for unauthenticated attackers to enable and disable maintenance mode.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息