Lucene search
Zhihua YaoPATCHSTACK:97C1A9ABA9E20F7444F45DAC99CA313AHistoryJun 05, 2018 - 12:00 a.m.
WordPress BBE theme <= 1.52 - Direct Object Reference vulnerability
2018-06-0500:00:00
Zhihua Yao
patchstack.com
6
0.001 Low
EPSS
Percentile
41.1%
Direct Object Reference vulnerability found by Zhihua Yao in WordPress BBE theme (versions <= 1.52). The vulnerability allows a direct launch of an HTML editor.
Solution
Update the WordPress BBE theme to the latest available version (at least 1.53).
References
Related
cve
cve
CVE-2018-11244
2018-05-18 17:29:00
cvelist
cvelist
CVE-2018-11244
2018-05-18 17:00:00
nvd
nvd
CVE-2018-11244
2018-05-18 17:29:00
prion
prion
Hardcoded credentials
2018-05-18 17:29:00
wpvulndb
wpvulndb
BBE Theme < 1.53 - Direct Object Reference
2018-05-10 00:00:00