Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xfjh-8mwq-67xv

Опубликовано: 05 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.

The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.

EPSS

Процентиль: 38%
0.00167
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.

EPSS

Процентиль: 38%
0.00167
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-330