Lucene search
+L

5 matches found

NVD
NVD
•added 2024/11/13 10:15 a.m.•24 views

CVE-2024-11028

The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersonation feature inappropriately determining the current user via user-supplied input. This makes it...

9.8CVSS0.01301EPSS
SaveExploits0References4
CVE
CVE
•added 2024/11/13 9:30 a.m.•82 views

CVE-2024-11028

CVE-2024-11028 affects MultiManager WP – Manage All Your WordPress Sites Easily for WordPress. Versions up to 1.0.5 are vulnerable to Authentication Bypass via a user-impersonation mechanism that determin es the current user from user-supplied input, enabling unauthenticated attackers to generate...

9.8CVSS9.5AI score0.01301EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/13 9:30 a.m.•13 views

CVE-2024-11028 MultiManager WP – Manage All Your WordPress Sites Easily <= 1.0.5 - Authentication Bypass via User Impersonation

The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersonation feature inappropriately determining the current user via user-supplied input. This makes it...

9.8CVSS7.1AI score0.01301EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/11/13 9:30 a.m.•38 views

CVE-2024-11028 MultiManager WP – Manage All Your WordPress Sites Easily <= 1.0.5 - Authentication Bypass via User Impersonation

The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersonation feature inappropriately determining the current user via user-supplied input. This makes it...

9.8CVSS0.01301EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•3 views

CVE-2024-11028: Authentication Bypass Using an Alternate Path or Channel

The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersonation feature inappropriately determining the current user via user-supplied input. This makes it...

9.8CVSS5.7AI score0.01301EPSS
SaveExploits0References1
Rows per page
Query Builder