RumbleTalk Live Group Chat – HTML5, 926d1229c47934b08e71c0bbf27c2df406a983a3
- CVE, Research URL
- Application
- Published on
- Oct 13, 2023
- Research Description
- RumbleTalk Live Group Chat – HTML5 [rumbletalk-chat-a-chat-with-themes] < 6.2.0 WordPress RumbleTalk Live Group Chat Plugin <= 6.1.9 is vulnerable to Broken Access Control No patched version is available. Mika discovered and reported this Broken Access Control vulnerability in WordPress RumbleTalk Live Group Chat Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
- Affected versions
-
Min -, max 6.2.0.
- Status
-
vulnerable