2 matches found
CVE-2024-56040 WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in VibeThemes VibeBP allows Privilege Escalation.This issue affects VibeBP: from n/a through 1.9.9.4.1...
CVE-2024-56040
CVE-2024-56040 concerns the WordPress plugin VibeBP (versions up to 1.9.9.4.1). The vulnerability is an Incorrect Privilege Assignment that enables privilege escalation. The root cause, per PT-2024-9989, is insufficient access control in the vibebp register user() function within includes/class.a...