Beveiligingsadvies

CVE-2020-36837

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-16 06:43:35

Laatst bijgewerkt 2024-10-16 18:03:47

Toegewezen door Wordfence

CVSS-score 9.9

Status PUBLISHED

Beschrijving

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there is a user named 'admin', the attacker will become automatically logged in as an administrator.

← Alle CVE's bekijken Bekijk op cve.org ↗