Threats tagged 'ghsa-65m9-fpqg-cx7w'

The Content Egg plugin for WordPress versions up to and including 12.0.0 has a vulnerability that allows authenticated users with contributor-level access or higher to modify product data on arbitrary posts. This is due to a missing per-post capability check in the ajaxUpdateProducts() function, which trusts the attacker-supplied post ID without verifying if the user has edit rights for that specific post. The flaw enables unauthorized modification of Content Egg product metadata and update timestamps on posts, including those owned by administrators.