Описание
The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to register a new administrative user account.
Уязвимые конфигурации
Конфигурация 1Версия до 3.5.2 (исключая)
cpe:2.3:a:contempothemes:real_estate_7:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 73%
0.00754
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-266
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 9.8
github
12 месяцев назад
The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to register a new administrative user account.
EPSS
Процентиль: 73%
0.00754
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-266
NVD-CWE-noinfo