LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data Write
LeadConnector WordPress plugin < 3.0.22 contains a broken access control caused by missing authorization in a REST route, letting unauthenticated attackers overwrite existing data remotely, exploit requires no authentication.
leadconnectorPoC 已收录
CVSS—