Beveiligingsadvies

CVE-2023-3460

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-04 07:23:28

Laatst bijgewerkt 2024-11-25 16:47:17

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild.

← Alle CVE's bekijken Bekijk op cve.org ↗