Health Check & Troubleshooting, 9021e2d622f2b4d6599f436f5c0352898f67faf5
- CVE, Research URL
- Home page URL
- Application
- Published on
- Jan 25, 2018
- Research Description
- Health Check & Troubleshooting [health-check] < 1.2.4 Health Check & Troubleshooting <= 1.2.3 - Missing Authorization Checks The Health Check & Troubleshooting plugin for WordPress is vulnerable to unauthorized execution of AJAX actions by subscriber level users and above in versions up to, and including 1.2.3. This is due to missing capability checks on the various functions hooked via AJAX actions in the plugin and can lead to attackers performing a variety of unauthorized actions.
- Affected versions
-
max 1.2.4.
- Status
-
vulnerable