The VK Blocks plugin for WordPress... CVE-2023-0583
-
AV
AC
AU
C
I
A
发布：
2023-06-03
修订：
2023-11-07
The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'update_vk_blocks_options' function in versions up to, and including, 1.57.0.5. This allows authenticated attackers, with contributor-level permissions or above, to change plugin settings including default icons.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
