Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 6:24 a.m.6 views

CVE-2024-5432

The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.6. This is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for unauthenticated attackers to log in as...

9.8CVSS7.2AI score0.00664EPSS
Exploits0References1
OSV
OSV
added 2024/06/20 2:15 a.m.7 views

CVE-2024-5432

The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.6. This is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for unauthenticated attackers to log in as...

9.8CVSS5.8AI score0.00664EPSS
Exploits0References3
NVD
NVD
added 2024/06/20 2:15 a.m.21 views

CVE-2024-5432

The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.6. This is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for unauthenticated attackers to log in as...

9.8CVSS0.00664EPSS
Exploits0References3
CVE
CVE
added 2024/06/20 2:8 a.m.68 views

CVE-2024-5432

CVE-2024-5432 affects Lifeline Donation for WordPress. Versions up to 1.2.6 are vulnerable to an authentication bypass due to insufficient verification of the user supplied during checkout, enabling unauthenticated attackers who can access the target's email to log in as an existing user (e.g., a...

9.8CVSS9.7AI score0.00664EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/20 2:8 a.m.15 views

CVE-2024-5432 Lifeline Donation <= 1.2.6 - Authentication Bypass

The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.6. This is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for unauthenticated attackers to log in as...

9.8CVSS7.2AI score0.00664EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.6 views

WordPress plugin Lifeline Donation security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS7AI score0.00664EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.7 views

PT-2024-36202 · WordPress · Lifeline Donation

Name of the Vulnerable Software and Affected Versions: Lifeline Donation plugin for WordPress versions up to, and including, 1.2.6 Description: The issue is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for unauthenticat...

9.8CVSS7.4AI score0.00664EPSS
Exploits0References7
Patchstack
Patchstack
added 2024/06/19 1:3 p.m.4 views

WordPress Lifeline Donation plugin <= 1.2.6 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Lifeline Donation versions = 1.2.6...

9.8CVSS7AI score0.00664EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/06/19 12:0 a.m.7 views

WordPress Lifeline Donation Plugin <= 1.2.6 is vulnerable to Broken Authentication

Software Lifeline Donation Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Authentication CVE CVE-2024-5432 Patch priority High CVSS severity High 10 Developer Claim ownership PSID c4cb49e164b6 Credits István Márton Required...

9.8CVSS6.5AI score0.00664EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder