← CVE Intelligence

CVE-2023-5235

Ovic Responsive WPBakery < 1.2.9 - Subscriber+ Option Update PUBLISHED

Description (CNA)

The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'users_can_register' and 'default_role'. It also unserializes user input in the process, which may lead to Object Injection attacks.

Affected (CNA)

Vendor / productVersions
Unknown / Ovic Responsive WPBakeryaffected 0 before 1.2.9

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.