Lucene search
Marco Wotschka / WordfencePATCHSTACK:810F0D3A0D5BE9C201DE4F66A448404FHistoryJun 16, 2022 - 12:00 a.m.
WordPress BuddyPress Group Reviews plugin <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
2022-06-1600:00:00
Marco Wotschka / Wordfence
patchstack.com
6
wordfence
marco wotschka
ajax actions
wordpress
buddypress
group reviews
vulnerability
update
EPSS
0.001
Percentile
40.4%
Unauthorized AJAX Actions due to Nonce Bypass discovered by Marco Wotschka / Wordfence in WordPress BuddyPress Group Reviews plugin (versions <= 2.8.3).
Solution
Update the WordPress BuddyPress Group Reviews plugin to the latest available version (at least 2.8.4).
Related
nvd
nvd
CVE-2022-2108
2022-07-18 17:15:08
cvelist
cvelist
CVE-2022-2108
2022-07-18 16:12:54
cve
cve
CVE-2022-2108
2022-07-18 17:15:08
prion
prion
Design/Logic Flaw
2022-07-18 17:15:00
wpvulndb
wpvulndb