Update CVE-2022-0952.yaml

patch-1
Ritik Chaddha 2022-07-25 17:45:07 +05:30 committed by GitHub
parent 7e501e87c5
commit 553b5d2f23
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -6,7 +6,7 @@ info:
severity: critical
description: |
The plugin does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin
reference:
reference:
- https://wpscan.com/vulnerability/0f694961-afab-44f9-846c-e80a0f6c768b
metadata:
verified: true