Pubjet
Monthly
Missing authorization in the Pubjet WordPress plugin (versions up to and including 5.4.8) allows an authenticated attacker with subscriber-level privileges to change plugin settings, resulting in a high integrity impact (CVSS 7.6). Exploitation requires the target site to permit user registration or the attacker to obtain valid low-privilege credentials, making open registration a primary exposure factor. No public exploit code has been identified at time of analysis, and the flaw is classified as CWE-862 (Missing Authorization).
Missing authorization in the Pubjet WordPress plugin (versions up to and including 5.4.8) allows an authenticated attacker with subscriber-level privileges to change plugin settings, resulting in a high integrity impact (CVSS 7.6). Exploitation requires the target site to permit user registration or the attacker to obtain valid low-privilege credentials, making open registration a primary exposure factor. No public exploit code has been identified at time of analysis, and the flaw is classified as CWE-862 (Missing Authorization).