Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-1860

Опубликовано: 28 фев. 2024
Источник: nvd
CVSS3: 6.5
CVSS3: 5.3
EPSS Низкий

Описание

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions up to, and including, 4.51. This makes it possible for unauthenticated attackers to add their IP Address to the whitelist circumventing protection

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:billminozzi:anti_hacker:*:*:*:*:*:wordpress:*:*
Версия до 4.52 (исключая)

EPSS

Процентиль: 42%
0.00199
Низкий

6.5 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
github
почти 2 года назад

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions up to, and including, 4.51. This makes it possible for unauthenticated attackers to add their IP Address to the whitelist circumventing protection

EPSS

Процентиль: 42%
0.00199
Низкий

6.5 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-862