Lucene search
K

CVE-2020-9043

🗓️ 17 Feb 2020 16:53:52Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 116 Views🌐 WEB

The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2020-9043
18 Feb 202014:38
circl
Cvelist
CVE-2020-9043
17 Feb 202016:53
cvelist
Nuclei
WordPress wpCentral <1.5.1 - Information Disclosure
3 Jun 202606:04
nuclei
NVD
CVE-2020-9043
17 Feb 202017:15
nvd
OpenVAS
WordPress wpCentral Plugin < 1.5.1 Improper Access Control Vulnerability
25 Feb 202000:00
openvas
Patchstack
WordPress wpCentral plugin <= 1.5.0 - Improper Access Control vulnerability leading to Privilege Escalation
17 Feb 202000:00
patchstack
Prion
Design/Logic Flaw
17 Feb 202017:15
prion
RedhatCVE
CVE-2020-9043
22 May 202516:53
redhatcve
VulnCheck KEV
VulnCheck KEV: CVE-2020-9043
5 Dec 202200:00
vulncheck_kev
wpexploit
wpCentral < 1.5.1 - Improper Access Control to Privilege Escalation
17 Feb 202000:00
wpexploit
Rows per page
NVD
Node
wpcentralwpcentralRange<1.5.1wordpress
ParameterPositionPathDescriptionCWE
Connection Keynestedwp-admin/index.phpExposure of session/connection key via page source allows credential leakage to escalate privilegesCWE-200
auth_keyquery paramwp-admin/admin-ajax.phpAuthentication key used to impersonate admin via AJAX action, enabling privilege escalationCWE-200
actionquery paramwp-admin/admin-ajax.phpAuthentication key used to impersonate admin via AJAX action, enabling privilege escalationCWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:39Current
8.5High risk
Vulners AI Score8.5
CVSS 3.18.8
CVSS 29
EPSS0.28562
116