NA

CVE-2023-6638

Published: 11/01/2024 Updated: 18/01/2024
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

The GTG Product Feed for Shopping plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_settings' function in versions up to, and including, 1.2.4. This makes it possible for unauthenticated malicious users to update plugin settings.

Vulnerable Product Search on Vulmon Subscribe to Product

gutengeek gg woo feed