medium6.5
CVE-2020-9514
An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress.
Impact
An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user (with the Subscriber role) to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages (via create_dynamic_page and delete_dynamic_page).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idxbroker | Impress For Idx Broker | before 2.6.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/idx-broker-platinum/#developers
- https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-impress-for-idx-broker/
- https://wordpress.org/plugins/idx-broker-platinum/#developers
- https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-impress-for-idx-broker/