Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Priority LOW 22

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00885 Published 2019-08-27 No fix listed