Lucene search

K
hiveproHive ProHIVEPRO:D3B54656C94CE4A05FED4E1B7F1947DC
HistorySep 26, 2022 - 6:35 a.m.

Zero-Day vulnerability in WPGateway Plugin compromises WordPress sites

2022-09-2606:35:39
Hive Pro
www.hivepro.com
19

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The recently uncovered CVE-2022-3180 zero-day vulnerability allows an unauthenticated attacker to add an administrator account to WPGateway-powered websites. WPGateway is a commercial plugin that allows users to install, backup, and clone WordPress. The flaw is being actively abused, and no patch has been issued yet.