Kutethemes

kutethemes

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Ovic Responsive Wpbakery

ovic_responsive_wpbakery

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-5235 1Kutethemes 1Ovic Responsive Wpbakery Jun 17, 2026 Jan 8, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'u...Show more The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'users_can_register' and 'default_role'. It also unserializes user input in the process, which may lead to Object Injection attacks.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-5235

1Kutethemes

1Ovic Responsive Wpbakery

Jun 17, 2026

Jan 8, 2024

N/A· v4

8.8 HIGH· v3

N/A· v2

The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'users_can_register' and 'default_role'. It also unserializes user input in the process, which may lead to Object Injection attacks.Show less