cleantalk
Vulnerabilities and Security Researches

Bulk NoIndex & NoFollow Toolkit, 8923d2af08e39ea9c34e21dd7390dd95e84d47ab

Published on
Sep 04, 2023
Research Description
Bulk NoIndex &amp; NoFollow Toolkit [bulk-noindex-nofollow-toolkit-by-mad-fish] < 1.51 WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Broken Access Control No patched version is available. No reply from the vendor. Skalucy discovered and reported this Broken Access Control vulnerability in WordPress Bulk NoIndex & NoFollow Toolkit Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
Affected versions
max 1.51.
Status
vulnerable