Vulnerabilities > CVE-2023-6741 - Unspecified vulnerability in Marvinlabs WP Customer Area

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
marvinlabs

Summary

The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users' account address.

Vulnerable Configurations

Part Description Count
Application
Marvinlabs
143