WordPress Plugin Vulnerabilities

Nested Pages <= 3.0.7 - Post Edit Bypass

Description

Contributors could quick edit posts not authored by themselves, and could allow them to change the slugs as well as titles.

Affects Plugins

Plugin icon
wp-nested-pages
Fixed in 3.0.8

References

URL
https://github.com/kylephillips/wp-nested-pages/issues/252

Miscellaneous

Original Researcher
Bart Dabek
Verified
No
WPVDB ID
1271c4b3-2c14-4d4d-991b-56ccde25a5e8

Timeline

Publicly Published
2019-03-26 (about 5 years ago)
Added
2019-07-31 (about 4 years ago)
Last Updated
2019-11-27 (about 4 years ago)

Other

Published
Title
Published
2016-02-04
Title
User Meta Manager <= 3.4.6 - Privilege Escalation
Published
2014-08-01
Title
Jetpack <= 2.9.2 - class.jetpack.php XML-RPC Access Control Bypass
Published
2016-04-01
Title
Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass
Published
2020-02-22
Title
CardGate < 3.1.16 - Unauthorised Payments Hijacking and Order Status Spoofing
Published
2020-02-29
Title
Booked < 2.2.6 - Broken Authentication to Export Users Data in CSV