The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for unauthenticated attackers to read posts, export subscriber lists, and/or deactivate the plugin.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published: 2023-06-07T01:51:52.111Z
Updated: 2024-08-04T17:37:07.070Z
Reserved: 2023-06-06T13:40:57.304Z
Link: CVE-2020-36730
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-06-07T02:15:12.800
Modified: 2023-11-07T03:22:30.437
Link: CVE-2020-36730
Redhat
No data.