CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0889

Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.2%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2023-0889

Metagauss » Themeflection Numbers » Version: N/A

cpe:2.3:a:metagauss:themeflection_numbers:-
Metagauss » Themeflection Numbers » Version: 1.0.0

cpe:2.3:a:metagauss:themeflection_numbers:1.0.0
Metagauss » Themeflection Numbers » Version: 1.0.1

cpe:2.3:a:metagauss:themeflection_numbers:1.0.1
Metagauss » Themeflection Numbers » Version: 1.0.2

cpe:2.3:a:metagauss:themeflection_numbers:1.0.2
Metagauss » Themeflection Numbers » Version: 1.1.0

cpe:2.3:a:metagauss:themeflection_numbers:1.1.0
Metagauss » Themeflection Numbers » Version: 1.1.1

cpe:2.3:a:metagauss:themeflection_numbers:1.1.1
Metagauss » Themeflection Numbers » Version: 1.1.2

cpe:2.3:a:metagauss:themeflection_numbers:1.1.2
Metagauss » Themeflection Numbers » Version: 1.2

cpe:2.3:a:metagauss:themeflection_numbers:1.2
Metagauss » Themeflection Numbers » Version: 1.2.1

cpe:2.3:a:metagauss:themeflection_numbers:1.2.1
Metagauss » Themeflection Numbers » Version: 1.2.2

cpe:2.3:a:metagauss:themeflection_numbers:1.2.2
Metagauss » Themeflection Numbers » Version: 1.2.3

cpe:2.3:a:metagauss:themeflection_numbers:1.2.3
Metagauss » Themeflection Numbers » Version: 1.2.4

cpe:2.3:a:metagauss:themeflection_numbers:1.2.4
Metagauss » Themeflection Numbers » Version: 1.2.5

cpe:2.3:a:metagauss:themeflection_numbers:1.2.5
Metagauss » Themeflection Numbers » Version: 1.3

cpe:2.3:a:metagauss:themeflection_numbers:1.3
Metagauss » Themeflection Numbers » Version: 1.3.1

cpe:2.3:a:metagauss:themeflection_numbers:1.3.1
Metagauss » Themeflection Numbers » Version: 1.3.2

cpe:2.3:a:metagauss:themeflection_numbers:1.3.2
Metagauss » Themeflection Numbers » Version: 1.4

cpe:2.3:a:metagauss:themeflection_numbers:1.4
Metagauss » Themeflection Numbers » Version: 1.4.1

cpe:2.3:a:metagauss:themeflection_numbers:1.4.1
Metagauss » Themeflection Numbers » Version: 1.4.10

cpe:2.3:a:metagauss:themeflection_numbers:1.4.10
Metagauss » Themeflection Numbers » Version: 1.4.11

cpe:2.3:a:metagauss:themeflection_numbers:1.4.11
Metagauss » Themeflection Numbers » Version: 1.4.12

cpe:2.3:a:metagauss:themeflection_numbers:1.4.12
Metagauss » Themeflection Numbers » Version: 1.4.13

cpe:2.3:a:metagauss:themeflection_numbers:1.4.13
Metagauss » Themeflection Numbers » Version: 1.4.14

cpe:2.3:a:metagauss:themeflection_numbers:1.4.14
Metagauss » Themeflection Numbers » Version: 1.4.15

cpe:2.3:a:metagauss:themeflection_numbers:1.4.15
Metagauss » Themeflection Numbers » Version: 1.4.16

cpe:2.3:a:metagauss:themeflection_numbers:1.4.16
Metagauss » Themeflection Numbers » Version: 1.4.2

cpe:2.3:a:metagauss:themeflection_numbers:1.4.2
Metagauss » Themeflection Numbers » Version: 1.4.3

cpe:2.3:a:metagauss:themeflection_numbers:1.4.3
Metagauss » Themeflection Numbers » Version: 1.4.4

cpe:2.3:a:metagauss:themeflection_numbers:1.4.4
Metagauss » Themeflection Numbers » Version: 1.4.5

cpe:2.3:a:metagauss:themeflection_numbers:1.4.5
Metagauss » Themeflection Numbers » Version: 1.4.6

cpe:2.3:a:metagauss:themeflection_numbers:1.4.6
Metagauss » Themeflection Numbers » Version: 1.4.7

cpe:2.3:a:metagauss:themeflection_numbers:1.4.7
Metagauss » Themeflection Numbers » Version: 1.4.8

cpe:2.3:a:metagauss:themeflection_numbers:1.4.8
Metagauss » Themeflection Numbers » Version: 1.4.9

cpe:2.3:a:metagauss:themeflection_numbers:1.4.9
Metagauss » Themeflection Numbers » Version: 1.5

cpe:2.3:a:metagauss:themeflection_numbers:1.5
Metagauss » Themeflection Numbers » Version: 1.5.1

cpe:2.3:a:metagauss:themeflection_numbers:1.5.1
Metagauss » Themeflection Numbers » Version: 1.5.2

cpe:2.3:a:metagauss:themeflection_numbers:1.5.2
Metagauss » Themeflection Numbers » Version: 1.6.0

cpe:2.3:a:metagauss:themeflection_numbers:1.6.0
Metagauss » Themeflection Numbers » Version: 1.6.1

cpe:2.3:a:metagauss:themeflection_numbers:1.6.1
Metagauss » Themeflection Numbers » Version: 1.6.2

cpe:2.3:a:metagauss:themeflection_numbers:1.6.2
Metagauss » Themeflection Numbers » Version: 1.7

cpe:2.3:a:metagauss:themeflection_numbers:1.7
Metagauss » Themeflection Numbers » Version: 1.7.1

cpe:2.3:a:metagauss:themeflection_numbers:1.7.1
Metagauss » Themeflection Numbers » Version: 1.7.2

cpe:2.3:a:metagauss:themeflection_numbers:1.7.2
Metagauss » Themeflection Numbers » Version: 1.7.3

cpe:2.3:a:metagauss:themeflection_numbers:1.7.3
Metagauss » Themeflection Numbers » Version: 1.7.4

cpe:2.3:a:metagauss:themeflection_numbers:1.7.4
Metagauss » Themeflection Numbers » Version: 1.7.5

cpe:2.3:a:metagauss:themeflection_numbers:1.7.5
Metagauss » Themeflection Numbers » Version: 1.8

cpe:2.3:a:metagauss:themeflection_numbers:1.8
Metagauss » Themeflection Numbers » Version: 1.8.1

cpe:2.3:a:metagauss:themeflection_numbers:1.8.1
Metagauss » Themeflection Numbers » Version: 2.0.0

cpe:2.3:a:metagauss:themeflection_numbers:2.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0889

Products

Pricing

Contact Us