CVE-2020-36714

HIGH

Brizy < 1.0.126 - Authorization Bypass to Settings Updates

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2020-36714 has a selected CVSS score of 7.4 (high).

Description

The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 3, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 11, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

brizy

Browse brizy / brizy
VulnCheckVersion data not supplied

Brizy – Page Builder

Browse themefusecom / Brizy – Page Builder

Default status: unaffected

CVE ListBefore 1.0.126affected

References

3