WordPress BuddyForms plugin <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation vulnerability

🗓️ 16 Sep 2024 07:18:49Reported by wesley (wcraft)Type

Authenticated privilege escalation in WordPress BuddyForms plugin up to version 2.8.11, discovered by wesley (wcraft).

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8246	14 Sep 202407:20	–	circl
CNNVD	WordPress plugin Post Form 安全漏洞	14 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8246	14 Sep 202403:19	–	cve
Cvelist	CVE-2024-8246 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation	14 Sep 202403:19	–	cvelist
EUVD	EUVD-2024-49044	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8246	14 Sep 202404:15	–	nvd
Patchstack	WordPress BuddyForms Plugin <= 2.8.11 is vulnerable to Privilege Escalation	16 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-38888 · WordPress · The Post Form – Registration Form – Profile Form For User Profiles – Frontend Content Forms For User Submissions	13 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8246	4 Feb 202522:30	–	redhatcve
Vulnrichment	CVE-2024-8246 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation	14 Sep 202403:19	–	vulnrichment

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/buddyforms/post-form-registration-form-profile-form-for-user-profiles-frontend-content-forms-for-user-submissions-ugc-2811-authenticated-contributor-privilege-escalation

16 Sep 2024 07:18Current

7High risk

Vulners AI Score7

CVSS 3.18.8

EPSS0.00423

SSVC