Wbcom Designs – BuddyPress Group Reviews, f5d05900-a3aa-4bf3-9647-b47b62fa7358
- CVE, Research URL
- Application
- Published on
- Apr 11, 2022
- Research Description
- Wbcom Designs – BuddyPress Group Reviews [review-buddypress-groups] < 2.8.1 Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation Multiple Plugins from Wbcom Designs have an AJAX action without authorisation and CSRF checks, allowing any logged in user to install, activate or deactivate a plugin on the site.
- Affected versions
-
max 2.8.1.
- Status
-
vulnerable