exploitDog

CVE-2024-1982

Опубликовано: 29 фев. 2024

Источник: nvd

CVSS3: 6.5

CVSS3: 9.1

EPSS Низкий

Описание

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_restore_progress() and restore() functions in all versions up to, and including, 0.9.68. This makes it possible for unauthenticated attackers to exploit a SQL injection vulnerability or trigger a DoS.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpvivid:migration\,_backup\,_staging:*:*:*:*:*:wordpress:*:*

Версия до 0.9.68 (включая)

EPSS

Процентиль: 38%

0.00169

Низкий

6.5 Medium

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-wrgr-v88r-75jx

CVSS3: 6.5

github

почти 2 года назад

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_restore_progress() and restore() functions in all versions up to, and including, 0.9.68. This makes it possible for unauthenticated attackers to exploit a SQL injection vulnerability or trigger a DoS.

EPSS

Процентиль: 38%

0.00169

Низкий

6.5 Medium

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-89