CVE-2023-51471CWE-287

WordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Arbitrary Options Update vulnerability

High · published April 24, 2024

CVSS v3.1
8.2
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00559 · 45.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-04-24T16:14Z
EPSS history
Timeline
  • 24 APR 16:14Z
    WordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Arbitrary Options Update vulnerability
    cvelistv5