CVE-2020-12073

The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests

Critical · published April 23, 2020

CVSS v3.0
9.1
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests.

The record
Technical detail
CVSS v3.0
9.1 · CRITICAL
Vector
CVSS:3.0/AC:L/AV:N/A:L/C:L/I:H/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01581 · 75.3th percentile
Published
2020-04-23T02:01Z
EPSS history
Timeline
  • 23 APR 02:01Z
    The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests
    cvelistv5