These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The VW Writer Blog theme for WordPress has a vulnerability allowing unauthorized modification of data due to a missing capability check on the 'vw_writer_blog_reset_all_settings' function in all versions up to, and including, 1.3.8. Authenticated attackers with Subscriber-level access and above can reset all theme customizer settings to their defaults.
The Ibtana – Ecommerce Product Addons plugin for WordPress has a vulnerability allowing unauthorized post meta modification. Authenticated attackers with Subscriber-level access can update or delete arbitrary post meta entries. This could lead to potential data integrity loss or site compromise. WordPress administrators and security teams should assess exposure and prioritize remediation for vulnerable in [truncated]
A Missing Authorization vulnerability was found in VW Wedding vw-wedding, affecting versions from n/a through 1.3.7. This issue allows for Exploiting Incorrectly Configured Access Control Security Levels, potentially leading to security risks. The vulnerability has a CVSS score of 5.3 and a severity of MEDIUM. The issue is characterized by CWE-862, and the CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C [truncated]
A Missing Authorization vulnerability in VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects VW Food Corner: from n/a through <= 1.1.0. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. Users of VW Food Corner up to version 1.1.0 should assess and mitigate this vulnerability. The CVE record was published on [truncated]