CVE-2020-36714

Published: 2023-10-20T08:15Z

Last Modified: 2025-01-16T15:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt