Vulnerabilities

TI-2023-04042 CVE-2023-4374 · GHSA-q5x2-6r32-h345

WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View

LOW 21

The WP Remote Users Sync plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'refresh_logs_async' functions in versions up to, and including, 1.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00738 Published 2023-08-16 No fix listed CWE-862

TI-2023-03677 CVE-2023-3958 · GHSA-jxpw-qh57-h233

WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery

LOW 38

The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notify_ping_remote' AJAX function in versions up to, and including, 1.2.12.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00735 Published 2023-08-16 No fix listed CWE-918

Vulnerabilities

Filters

WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View

WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery