Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:pilotpress:pilotpress:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

PilotPress Plugin for WordPress Privilege Escalation via Account Takeover

The PilotPress WordPress plugin (<= 2.0.43) contains a logic flaw in the update_cc_details() AJAX handler that allows an authenticated attacker to trigger an administrative account takeover.

PilotPress wordpress privilege-escalation vulnerability
1t 1c