exploitDog

CVE-2019-15823

Опубликовано: 30 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.

Ссылки

https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
Exploit
Third Party Advisory
https://wordpress.org/plugins/wps-hide-login/#developers
Product
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9469
Third Party Advisory
https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
Exploit
Third Party Advisory
https://wordpress.org/plugins/wps-hide-login/#developers
Product
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9469
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpserveur:wps_hide_login:*:*:*:*:*:wordpress:*:*

Версия до 1.5.3 (исключая)

EPSS

Процентиль: 98%

0.50496

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-q98w-m2p3-q3ff

github

больше 3 лет назад

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.

EPSS

Процентиль: 98%

0.50496

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo