Simple Giveaways – Grow your business, email lists and traffic with contests, 7e57cd4f4859826de00a8e2b09ee24fb7f2d824b

CVE, Research URL: 7e57cd4f4859826de00a8e2b09ee24fb7f2d824b
Home page URL: Security reports for Simple Giveaways – Grow your business, email lists and traffic with contests
Application: Simple Giveaways – Grow your business, email lists and traffic with contests
Published on: Feb 25, 2019
Research Description: Simple Giveaways – Grow your business, email lists and traffic with contests [giveasap] < 2.18.0 Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update The Freemius SDK for WordPress is vulnerable to authorization bypass due to a missing capability check on the _get_db_option and _set_db_option functions in versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change site settings and potentially take over the site.
Affected versions: max 2.18.0.
Status: vulnerable

Simple Giveaways &#8211; Grow your business, email lists and traffic with contests, 7e57cd4f4859826de00a8e2b09ee24fb7f2d824b