Lucene search

K
cvelistMitreCVELIST:CVE-2017-16562
HistoryNov 09, 2017 - 7:00 p.m.

CVE-2017-16562

2017-11-0919:00:00
mitre
www.cve.org
3

AI Score

9.6

Confidence

High

EPSS

0.785

Percentile

98.3%

The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the “admin” username, allows remote attackers to bypass authentication and obtain administrative access via a “true” value for the up_auto_log parameter in the QUERY_STRING to the default URI.

AI Score

9.6

Confidence

High

EPSS

0.785

Percentile

98.3%