Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress.
Solution:
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Link | Tags |
---|---|
https://patchstack.com/database/vulnerability/image-hover-effects-ultimate/wordpress-image-hover-effects-ultimate-plugin-9-7-1-auth-wordpress-options-change-vulnerability?_s_id=cve | third party advisory |
https://wordpress.org/plugins/image-hover-effects-ultimate/ | product third party advisory |