← Back

Kishorkhambu

kishorkhambu

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Wp Custom Widget Area
wp_custom_widget_area
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-6066
1Kishorkhambu
1Wp Custom Widget Area
Jun 17, 2026
Jan 15, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of its AJAX action callback functions, which could allow attackers with subscriber+ privilege to create,...Show more
The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of its AJAX action callback functions, which could allow attackers with subscriber+ privilege to create, delete or modify menus on the site.Show less