WordPress Plugin Vulnerabilities
FeedFocal < 1.3.0 - Unauthenticated Tracking Code Update
Description
The plugin is lacking authorisation checks in its feedfocal_api_setup function, allowing unauthenticated attackers to update the Tracking Code via the feedfocal_survey_code option.
Affects Plugins
Fixed in 1.3.0 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Mika
Verified
No
WPVDB ID
Timeline
Publicly Published
2023-10-24 (about 2 years ago)
Added
2023-11-23 (about 2 years ago)
Last Updated
2024-03-20 (about 2 years ago)
WPScan 