6 matches found
CVE-2024-13182
The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpparserequest' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...
CVE-2024-13182 WP Directorybox Manager <= 2.5 - Authentication Bypass
The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpparserequest' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...
CVE-2025-0316
The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpenquiryagentcontactformsubmitcallback' function. This makes it possible for unauthenticated attackers to log in as any...
CVE-2025-0316 WP Directorybox Manager <= 2.5 - Authentication Bypass
The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpenquiryagentcontactformsubmitcallback' function. This makes it possible for unauthenticated attackers to log in as any...
CVE-2025-0316
CVE-2025-0316 affects the WordPress plugin WP Directorybox Manager (versions <= 2.5). Affected component: authentication logic in wp_dp_enquiry_agent_contact_form_submit_callback leads to an authentication bypass, allowing unauthenticated users who know a username to log in as that user (e.g.,...
CVE-2025-0316 WP Directorybox Manager <= 2.5 - Authentication Bypass
The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpenquiryagentcontactformsubmitcallback' function. This makes it possible for unauthenticated attackers to log in as any...