Lucene search
HistoryNov 08, 2022 - 7:15 p.m.
CVE-2022-40206
wpforo forum
insecure direct object references
wordpress
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
19.5%
Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public.
Affected configurations
Node
gvectorswpforo_forumRange≤2.0.5wordpress
Related
prion
prion
Spoofing
2022-11-08 19:15:00
cvelist
cvelist
cve
cve
CVE-2022-40206
2022-11-26 00:00:00
patchstack
patchstack
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
19.5%
Related for NVD:CVE-2022-40206