Wpvar

Wp Shamsi

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-0335

Exploit
  • EPSS 0.07%
  • Published 27.03.2023 16:15:08
  • Last modified 19.02.2025 21:15:11

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.

5.3

CVE-2022-4555

  • EPSS 0.07%
  • Published 16.12.2022 14:15:09
  • Last modified 21.11.2024 07:35:28

The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hooked via init() in versions up to, and including, 4.1.0. This makes it possible for unauthenticated attackers to...

4.3

CVE-2022-38058

  • EPSS 0.31%
  • Published 09.09.2022 15:15:13
  • Last modified 21.11.2024 07:15:40

Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress.