Lucene search
PRIOn knowledge basePRION:CVE-2023-3460HistoryJul 04, 2023 - 8:15 a.m.
Code injection
2023-07-0408:15:00
PRIOn knowledge base
www.prio-n.com
12
wordpress
ultimate member
code injection
arbitrary user accounts
administrator accounts
nvd
The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimate_member | lt | 2.6.7 |
Related
cve
cve
CVE-2023-3460
2023-07-04 08:15:10
cvelist
cvelist
CVE-2023-3460 Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
2023-07-04 07:23:28
wordfence
wordfence
githubexploit
githubexploit
Exploit for CVE-2023-3460
2023-07-09 16:46:17
Exploit for CVE-2023-3460
2023-07-11 20:15:20
Exploit for CVE-2023-3460
2023-07-27 15:19:16
nvd
nvd
CVE-2023-3460
2023-07-04 08:15:10
osv
osv
CVE-2023-3460
2023-07-04 08:15:10
wpvulndb
wpvulndb
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
2023-06-29 00:00:00
hackread
hackread
Zero-Day Exploit Threatens 200,000 WordPress Websites
2023-07-03 14:59:42
wpexploit
wpexploit
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
2023-06-29 00:00:00
nuclei
nuclei
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
2023-07-16 09:50:13
openvas
openvas
WordPress Ultimate Member Plugin < 2.6.7 Privilege Escalation Vulnerability
2023-07-05 00:00:00
thn
thn