Описание
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a request containing a user name in the Email parameter and the API key in the i4w_clearuser parameter.
Ссылки
- Exploit
- Exploit
- Exploit
- Exploit
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:imember360:imember360:3.8.012:*:*:*:*:wordpress:*:*
cpe:2.3:a:imember360:imember360:3.8.013:*:*:*:*:wordpress:*:*
cpe:2.3:a:imember360:imember360:3.8.014:*:*:*:*:wordpress:*:*
cpe:2.3:a:imember360:imember360:3.9.000:*:*:*:*:wordpress:*:*
cpe:2.3:a:imember360:imember360:3.9.001:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 93%
0.10273
Средний
4.3 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a request containing a user name in the Email parameter and the API key in the i4w_clearuser parameter.
EPSS
Процентиль: 93%
0.10273
Средний
4.3 Medium
CVSS2
Дефекты
CWE-264