Design/Logic Flaw

2018-08-2607:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

An issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form, login form, and password-recovery form require solving a CAPTCHA to perform actions. However, this is required only once per user session, and therefore one could send as many requests as one wished by automation.

CPENameOperatorVersion
ajax_bootmodal_logineq1.4.3

CPE	Name	Operator	Version
	ajax_bootmodal_login	eq	1.4.3

References

github.com/aas-n/CVE/tree/master/ajax-bootmodal-login