cleantalk
Vulnerabilities and Security Researches

EDD Tab Manager, 6ff37c2e-e21d-4abc-bafe-8ca6a2c1ed76

Application

EDD Tab Manager

Published on
-
Research Description
EDD Tab Manager [edd-tab-manager] < 1.3.1 (closed) Freemius Library &lt; 2.2.4 - Subscriber+ Arbitrary Option Update The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options
Affected versions
max 1.3.1.
Status
vulnerable