VULNERABILITY INTELLIGENCE

CVE-2020-9392

CVSS score7.3 HIGH
EPSS probability1.68%
CISA KEVNot currently listed
Published2020-03-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.

Weakness classification

  • nvd@nist.gov: CWE-276

Primary references