VYPR

CMS Commander

by Cmscommander

CVEs (1)

  • CVE-2023-3325HigJun 20, 2023
    risk 0.46cvss 8.1epss 0.01

    The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the…