CVE-2025-11237: CVE-2025-11237: güvenlik açığı

Açıklama (NVD)

The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options.

Özet bilgiler

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,30 (yüzdelik 22)

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wpscan.com