Description
WordPress Plugin Crayon Syntax Highlighter is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently overwrite base themes with arbitrary CSS, which may lead to possible defacement of a website. WordPress Plugin Crayon Syntax Highlighter version 2.6.10 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.7.0 or latest
References
Related Vulnerabilities
FluxBB Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2020-28873)
WordPress Plugin Advanced Search Cross-Site Scripting (1.1.2)
MySQL CVE-2022-21289 Vulnerability (CVE-2022-21289)
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.30)
WordPress Plugin ManageWP Worker Unspecified Vulnerability (4.1.7)