This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2022-3881 | BDVDB-2026-190227 Detail

WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Log

Description#

The WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Log WordPress plugin before 3.43 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-863 Incorrect Authorization
  • CWE-352 Cross-Site Request Forgery (CSRF)

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.