Missing Authorization

  • BERJAYAviktoriwan

    (@viktoriwan)


    5 months, 2 weeks ago

    The Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

    • This topic was modified 5 months, 2 weeks ago by BERJAYAviktoriwan.
    • This topic was modified 5 months, 2 weeks ago by BERJAYAviktoriwan.

    The page I need help with: [log in to see the link]

You must be logged in to reply to this topic.