CVE-2020-36714

Summary

CVE-2020-36714 is a vulnerability affecting the Brizy plugin for WordPress. Before version 1.0.126, this plugin incorrectly checks capabilities on the is_administrator() function, leading to an authorization bypass. Consequently, authenticated attackers can access and interact with available AJAX functions, potentially causing unintended actions or data manipulation. This issue poses a significant risk to websites utilizing the Brizy plugin and should be addressed promptly through an update to a patched version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.