Description
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently perform arbitrary SQL queries that can be leveraged for privilege escalation. WordPress Plugin Visualizer:Tables and Charts Manager for WordPress version 3.10.15 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.11.0 or latest
References
Related Vulnerabilities
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3190)
Internet Information Services Other Vulnerability (CVE-2000-0858)
Claroline Other Vulnerability (CVE-2005-1374)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.27)
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10356)