Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q5xq-vwc2-mfrm

Опубликовано: 11 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator.

The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator.

EPSS

Процентиль: 67%
0.0055
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 9.8
nvd
12 месяцев назад

The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator.

EPSS

Процентиль: 67%
0.0055
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269