Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/07 12:03 a.m.•17 views

CVE-2024-9822

CVE-2024-9822 Pedalo Connector = 2.0.5 - Contournement d'authentification vers Administrateur Description Le plugin Pedalo Connector pour WordPress est vulnérable à un contournement d'authentification dans les versions jusqu'à la 2.0.5 incluse. Cela est dû à une restriction insuffisante de la...

9.8CVSS6.2AI score0.00939EPSS
SaveExploits0
OSV
OSV
•added 2024/10/11 3:15 a.m.•13 views

CVE-2024-9822

The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the...

9.8CVSS5.8AI score0.00939EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/11 3:15 a.m.•31 views

CVE-2024-9822

The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the...

9.8CVSS0.00939EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/11 2:32 a.m.•52 views

CVE-2024-9822 Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator

The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the...

9.8CVSS0.00939EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/11 2:32 a.m.•12 views

CVE-2024-9822 Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator

The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the...

9.8CVSS7.2AI score0.00939EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/11 2:32 a.m.•86 views

CVE-2024-9822

The Pedalo Connector plugin for WordPress (v

9.8CVSS9.7AI score0.00939EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/10/11 12:00 a.m.•16 views

WordPress plugin Pedalo Connector 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.5AI score0.00939EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/11 12:00 a.m.•1 views

CVE-2024-9822: Authentication Bypass Using an Alternate Path or Channel

The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the...

9.8CVSS5.7AI score0.00939EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/10 3:12 p.m.•17 views

WordPress Pedalo Connector plugin <= 2.0.5 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Pedalo Connector versions = 2.0.5...

9.8CVSS7AI score0.00939EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/10/10 12:00 a.m.•22 views

WordPress Pedalo Connector Plugin <= 2.0.5 is vulnerable to Broken Authentication

Software Pedalo Connector Type Plugin Vulnerable versions = 2.0.5 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9822 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 4f984c880363 Credits István...

9.8CVSS9.5AI score0.00939EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/10 12:00 a.m.•28 views

PT-2024-39867 · WordPress · Pedalo Connector

Name of the Vulnerable Software and Affected Versions: The Pedalo Connector plugin for WordPress versions up to, and including, 2.0.5 Description: The issue is due to insufficient restriction on the login admin user function, making it possible for unauthenticated attackers to log in as the first...

9.8CVSS7AI score0.00939EPSS
SaveExploits0References12
Rows per page
Query Builder