Lucene search

CVE-2020-35934

🗓️ 01 Jan 2021 02:13:15Reported by [email protected]Type

The Advanced Access Manager plugin for WordPress exposes unfiltered user object via REST AP

Reporter	Title	Published	Views	Family All 6
Prion	Code injection	1 Jan 202102:15	–	prion
WPVulnDB	Advanced Access Manager < 6.6.2 - Authenticated Information Disclosure	20 Aug 202000:00	–	wpvulndb
Cvelist	CVE-2020-35934	1 Jan 202101:25	–	cvelist
CVE	CVE-2020-35934	1 Jan 202102:15	–	cve
Patchstack	WordPress Advanced Access Manager plugin <= 6.6.1 - Authenticated Information Disclosure vulnerability	20 Apr 202000:00	–	patchstack
OpenVAS	WordPress Advanced Access Manager Plugin < 6.6.2 Multiple Vulnerabilities	20 Aug 202000:00	–	openvas

Nvd

Node

vasyltech advanced_access_managerRange<6.6.2wordpress

Source	Link
wordfence	www.wordfence.com/blog/2020/08/high-severity-vulnerability-patched-in-advanced-access-manager/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jan 2021 02:15Current

4.5Medium risk

Vulners AI Score4.5

CVSS24

CVSS34.3

EPSS0.00328

CWE-200