Beveiligingsadvies

CVE-2022-1903

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-27 08:58:19

Laatst bijgewerkt 2024-08-03 00:17:00

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username

← Alle CVE's bekijken Bekijk op cve.org ↗