CyberRota
← Ana sayfaya dön

CVE-2026-3462

MEDIUM · CVSS 6.5 EPSS %0.28

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-27T08:16:44.923 · Çekilme zamanı: 2026-06-30T18:36:31.158225+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-3462
Severity
MEDIUM
CVSS
6.5
EPSS
%0.28
WordPress

Orijinal NVD Açıklaması

The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functions in all versions up to, and including, 1.8.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary CSV data and overwrite WooCommerce payment tokens, postmeta, and order meta records.