Security & Malware scan by CleanTalk, 23960f42-dfc1-4951-9169-02d889283f01

CVE, Research URL: 23960f42-dfc1-4951-9169-02d889283f01
Home page URL: Security reports for Security & Malware scan by CleanTalk
Application: Security & Malware scan by CleanTalk
Published on: -
Research Description: Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.51 Security & Malware scan by CleanTalk < 2.51 - Security Nonce Leak leading to Unauthorised AJAX call Security nonce leak, allowing any authenticated users (such as subscribers) to make unauthorised AJAX call which could lead to arbitrary file deletion/download and function call. Note (WPScanTeam): We do not consider the issue fully remediated, as the AJAX calls rely on CSRF check for authorisation, instead of proper authorisation verification with the current_user_can() function. However, it would require chaining with other issues to be exploited.
Affected versions: max 2.51.
Status: vulnerable