Wbcom Designs – BuddyPress Group Reviews, 38941ffe47ab697bbd9bd96f16432044f1f980d9
- CVE, Research URL
- Application
- Published on
- Apr 13, 2022
- Research Description
- Wbcom Designs – BuddyPress Group Reviews [review-buddypress-groups] < 2.8.1 Wbcom Designs Plugins (Various Versions) - Arbitrary Plugin Installation, Activation and Deactivation Several WordPress plugins by Wbcom Designs were vulnerable to arbitrary plugin installation, activation and deactivation due to missing authorization checks on the wp_ajax_wbcom_manage_plugin_installation AJAX action function wbcom_do_plugin_action.
- Affected versions
-
max 2.8.1.
- Status
-
vulnerable