Описание
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.302 (исключая)
cpe:2.3:a:membersonic:membersonic:*:*:*:*:lite:wordpress:*:*
EPSS
Процентиль: 72%
0.00706
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.
EPSS
Процентиль: 72%
0.00706
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-269