CVE-2024-0710

CVE-2024-0710 Уязвимость: CVE-2024-0710 Неавторизованное изменение уникального идентификатора отправки формы CVSS: 5.3 Средний Программное обеспечение: GP Unique ID gp-unique-id Затронутые версии: = 1.5.5 Исправленная версия: 1.5.6 Разработчик: Gravity Wiz Исследователь: Karl Emil Nikka, Nikka...

PT-2024-15771

Name of the Vulnerable Software and Affected Versions GP Unique ID plugin for WordPress versions up to, and including, 1.5.5 Description The issue is due to insufficient input validation, allowing unauthenticated attackers to tamper with the generation of a unique ID on a form submission and...

CVE-2024-0710: Improper Input Validation

The GP Unique ID plugin for WordPress is vulnerable to Unique ID Modification in all versions up to, and including, 1.5.5. This is due to insufficient input validation. This makes it possible for unauthenticated attackers to tamper with the generation of a unique ID on a form submission and repla...