← CVE Intelligence

CVE-2023-6741

WP Customer Area < 8.2.1 - Subscriber+ Account Address Update PUBLISHED

Description (CNA)

The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users' account address.

Affected (CNA)

Vendor / productVersions
Unknown / WP Customer Areaaffected 0 before 8.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.