CVE-2020-13764

2020-06-0221:15:10

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.1%

JSON

common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a $current_user->get($property) call.

CPENameOperatorVersion
gravityformseq1.8.7.11
gravityformseq1.8.20.5
gravityformseq2.0.1
gravityformseq2.0.5
gravityformseq2.2.6
gravityformseq1.6.12
gravityformseq1.7.8
gravityformseq2.4.7.3
gravityformseq2.2.1
gravityformseq1.9.17

Name	Operator	Version
gravityforms	eq	1.8.7.11
gravityforms	eq	1.8.20.5
gravityforms	eq	2.0.1
gravityforms	eq	2.0.5
gravityforms	eq	2.2.6
gravityforms	eq	1.6.12
gravityforms	eq	1.7.8
gravityforms	eq	2.4.7.3
gravityforms	eq	2.2.1
gravityforms	eq	1.9.17