Lucene search
China National Vulnerability DatabaseCNVD-2022-72703HistoryApr 27, 2022 - 12:00 a.m.
WordPress plugin flo-launch access control error vulnerability
2022-04-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.003 Low
EPSS
Percentile
68.8%
WordPress is a blogging platform developed using the PHP language. The WordPress plugin flo-launch version 2.4.1 or earlier is vulnerable to an access control error that originates when the plugin injects code into wp-config.php when creating a clone site. _prefix cookie to an arbitrary value to start a new site installation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress flo-launch plugin | lt | 2.4.1 |
Related
cve
cve
CVE-2022-0541
2022-04-25 16:16:07
prion
prion
Code injection
2022-04-25 16:16:00
patchstack
patchstack
wpvulndb
wpvulndb
Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover
2022-03-29 00:00:00
nvd
nvd
CVE-2022-0541
2022-04-25 16:16:07
cvelist
cvelist
wpexploit
wpexploit
Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover
2022-03-29 00:00:00