← Back to CVE List

CVE-2023-5737

Published: 2023-11-27T17:15Z
Last Modified: 2024-11-21T08:42Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt