Wpdeveloper

Countdown Block

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2021-24633

Exploit
  • EPSS 0.17%
  • Published 27.09.2021 16:15:08
  • Last modified 21.11.2024 05:53:27

The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents displayed to users.