exploitDog

CVE-2019-15825

Опубликовано: 30 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.

Ссылки

https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
Exploit
Third Party Advisory
https://wordpress.org/plugins/wps-hide-login/#developers
Product
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9469
Third Party Advisory
https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
Exploit
Third Party Advisory
https://wordpress.org/plugins/wps-hide-login/#developers
Product
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9469
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpserveur:wps_hide_login:*:*:*:*:*:wordpress:*:*

Версия до 1.5.3 (исключая)

EPSS

Процентиль: 77%

0.01024

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-p4g4-j4xc-pw7g

github

больше 3 лет назад

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.

EPSS

Процентиль: 77%

0.01024

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo