Files
nvd-json-data-feeds/CVE-2025/CVE-2025-112xx/CVE-2025-11237.json
T

21 lines
707 B
JSON

{
"id": "CVE-2025-11237",
"sourceIdentifier": "[email protected]",
"published": "2025-11-11T06:15:34.690",
"lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options."
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/88b46752-051b-4468-9e2b-cc81a9ce1075/",
"source": "[email protected]"
}
]
}