CVE-2023-6741
16.01.2024, 16:15
The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users' account address.Enginsight
| Vendor | Product | Version |
|---|---|---|
| marvinlabs | wp_customer_area | 𝑥 < 8.2.1 |
𝑥
= Vulnerable software versions