CVE-2023-6751

Published: 2024-01-11T09:15Z

Last Modified: 2024-11-21T08:44Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the function publish_website in all versions up to, and including, 1.9.7. This makes it possible for unauthenticated attackers to enable and disable maintenance mode. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt