Read the docs

Wp Debugging Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Debugging Project records in CISA KEV

No Wp Debugging Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Wp Debugging · all components

Priority LOW 30

The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing any authorisation and CSRF checks, as a result, the settings can be updated by unauthenticated users.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00575 Published 2021-10-25 Fixed in 2.11.0 CWE-862
Open these records in search →