Test ID:	1.3.6.1.4.1.25623.1.0.127527
Category:	Web application abuses
Title:	WordPress PageLayer Plugin < 1.1.2 Multiple Vulnerabilities
Summary:	The WordPress plugin 'PageLayer' is prone to multiple; vulnerabilities.
Description:	Summary: The WordPress plugin 'PageLayer' is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2020-35944: Attackers are able to forge a request on behalf of a site's administrator to modify the settings of the plugin which could allow for malicious Javascript injection. - CVE-2020-35947: Nearly all of the AJAX action endpoints in this plugin failed to include permission checks allowing these actions to be executed by anyone authenticated on the site. Affected Software/OS: WordPress PageLayer plugin prior to version 1.1.2. Solution: Update to version 1.1.2 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35944 https://wpscan.com/vulnerability/10240 https://www.wordfence.com/blog/2020/05/high-severity-vulnerabilities-in-pagelayer-plugin-affect-over-200000-wordpress-sites/ Common Vulnerability Exposure (CVE) ID: CVE-2020-35947 https://wpscan.com/vulnerability/10239
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.