Description (CNA)
The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in user accessing any endpoint in the wp-admin directory to modify the content of any existing post or page created with the Brizy editor. An identical issue was found by another researcher in Brizy <= 1.0.125 and fixed in version 1.0.126, but the vulnerability was reintroduced in version 1.0.127.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brizy.io / Brizy - Page Builder | affected 2.3.11 through 2.3.11; affected 1.0.127 before 1.0.127*; affected 1.0.125 through 1.0.125 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.