Beveiligingsadvies

CVE-2025-4104

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-07 09:21:44

Laatst bijgewerkt 2025-05-07 13:29:49

Toegewezen door Wordfence

CVSS-score 9.8

Status PUBLISHED

Beschrijving

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_wp_ajax_fed_login_form_post() function in versions 1.0 to 2.2.6. This makes it possible for unauthenticated attackers to reset the administrator’s email and password, and elevate their privileges to that of an administrator.

← Alle CVE's bekijken Bekijk op cve.org ↗