Lucene search
K

5 matches found

Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.12 views

WordPress 3.7.x < 3.7.24 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - wp-admin/user-new.php sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access...

8.8CVSS6.7AI score0.07945EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.28 views

WordPress 4.7.x < 4.7.8 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - wp-admin/user-new.php sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access...

8.8CVSS6.7AI score0.07945EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.11 views

WordPress 4.5.x < 4.5.12 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - wp-admin/user-new.php sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access...

8.8CVSS6.7AI score0.07945EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2017/12/02 6:0 a.m.23 views

CVE-2017-17091

wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restrictions by entering this string...

8.8CVSS8.3AI score0.0343EPSS
Exploits0
myhack58
myhack58
added 2008/12/25 12:0 a.m.25 views

Wordpress 2.7.0 admin remote code execution vulnerability-vulnerability warning-the black bar safety net

by Ryatpuretot mail: puretot at gmail dot com team: http://www.80vul.com date: 2008-12-18 Analysis: This vulnerability out in the background: wp-admin/post.php if currentusercan'editpost', $postID if $last = wpcheckpostlock $post-ID $lastuser = getuserdata $last ; $lastusername = $lastuser ?...

8.2AI score
Exploits0
Rows per page
Query Builder