CVE-2020-9392: High severity Supsystic Pricing Table By Supsystic Wordpress vulnerability
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-9392?
CVE-2020-9392 is a vulnerability in the pricing-table-by-supsystic plugin before version 1.8.2 for WordPress, which allows unauthenticated users to retrieve pricing table information and perform unauthorized actions.
What is the severity of CVE-2020-9392?
CVE-2020-9392 has a severity rating of 7.3 (High).
How does CVE-2020-9392 affect Supsystic Pricing Table By Supsystic plugin?
CVE-2020-9392 affects Supsystic Pricing Table By Supsystic plugin versions up to and excluding 1.8.2 for WordPress.
How can unauthenticated users exploit CVE-2020-9392?
Unauthenticated users can exploit CVE-2020-9392 to retrieve pricing table information, create new tables, or import/modify existing tables.
Is there a fix for CVE-2020-9392?
Yes, updating the pricing-table-by-supsystic plugin to version 1.8.2 or newer will fix the vulnerability.