Lucene search
+L

3 matches found

OSV
OSV
added 2024/02/12 4:15 p.m.6 views

CVE-2023-6036

The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handleauthrequest' and 'hadleloginrequest'. This makes it possible for non authenticated attackers to log in as any existing user on the site,...

9.8CVSS5.8AI score0.01773EPSS
SaveExploits3References1
NVD
NVD
added 2024/02/12 4:15 p.m.31 views

CVE-2023-6036

The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handleauthrequest' and 'hadleloginrequest'. This makes it possible for non authenticated attackers to log in as any existing user on the site,...

9.8CVSS6.4AI score0.01773EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2024/02/12 4:6 p.m.46 views

CVE-2023-6036 Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass

The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handleauthrequest' and 'hadleloginrequest'. This makes it possible for non authenticated attackers to log in as any existing user on the site,...

6.7AI score0.01773EPSS
SaveExploits3References1
Rows per page
Query Builder