CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2023-51482

WordPress Eazy Plugin Manager plugin <= 4.1.2 - Auth. Arbitrary Options Update lead to RCE vulnerability

Status: Published
Published: 2024-04-25
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Improper Authentication vulnerability in EazyPlugins Eazy Plugin Manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Eazy Plugin Manager: from n/a through 4.1.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EazyPlugins Eazy Plugin Manager

Default version status: unaffected

n/a to ≤ 4.1.2affected

References

https://patchstack.com/database/vulnerability/plugins-on-steroids/wordpress-eazy-plugin-manager-plugin-4-1-2-subscriber-arbitrary-options-update-lead-to-rce-vulnerability?_s_id=cve ↗