| Package | Affected versions | Patched versions |
|---|---|---|
| stylish price list | < 6.9.0 | 6.9.0 |
The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX action (available to both unauthenticated and authenticated users), which could allow unauthenticated users to upload images.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free