Lucene search

K
patchstackTien Nguyen Anh (Patchstack Alliance)PATCHSTACK:FD6A03948CD55B42B59D05D65EF56C42
HistoryAug 02, 2022 - 12:00 a.m.

WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability

2022-08-0200:00:00
Tien Nguyen Anh (Patchstack Alliance)
patchstack.com
14
wordpress
activedemand
patchstack alliance
broken authentication
update

EPSS

0.001

Percentile

31.3%

Broken Authentication vulnerability leading to unauthenticated post update/create/delete discovered by Tien Nguyen Anh (Patchstack Alliance) in WordPress ActiveDEMAND plugin (versions <= 0.2.27).

Solution

           Update the WordPress ActiveDEMAND plugin to the latest available version (at least 0.2.28).

EPSS

0.001

Percentile

31.3%

Related for PATCHSTACK:FD6A03948CD55B42B59D05D65EF56C42