WordPress BuddyForms Plugin <= 2.8.11 is vulnerable to Privilege Escalation

🗓️ 16 Sep 2024 00:00:00Reported by wesley (wcraft)Type

patchstack

patchstack🔗 patchstack.com👁 19 Views

WordPress BuddyForms Plugin <= 2.8.11 Privilege Escalatio

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8246	14 Sep 202407:20	–	circl
CNNVD	WordPress plugin Post Form 安全漏洞	14 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8246	14 Sep 202403:19	–	cve
Cvelist	CVE-2024-8246 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation	14 Sep 202403:19	–	cvelist
EUVD	EUVD-2024-49044	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8246	14 Sep 202404:15	–	nvd
Patchstack	WordPress BuddyForms plugin <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation vulnerability	16 Sep 202407:18	–	patchstack
Positive Technologies	PT-2024-38888 · WordPress · The Post Form – Registration Form – Profile Form For User Profiles – Frontend Content Forms For User Submissions	13 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8246	4 Feb 202522:30	–	redhatcve
Vulnrichment	CVE-2024-8246 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation	14 Sep 202403:19	–	vulnrichment

Vulners

Node

themekraft buddyformsRange≤2.8.11wordpress

Source	Link
wordpress	www.wordpress.org/plugins/buddyforms/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/buddyforms/post-form-registration-form-profile-form-for-user-profiles-frontend-content-forms-for-user-submissions-ugc-2811-authenticated-contributor-privilege-escalation

16 Sep 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.8

EPSS0.00423

SSVC

wordpress buddyforms privilege escalation vulnerable