3 matches found
CVE-2017-1002006
Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/savecontact.php doesn't check that the user is authorized before injecting new contacts into the wpcontact table...
7.5CVSS5.8AI score0.03232EPSS
SaveExploits1References3
CVE-2017-1002006: Missing Authorization
Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/savecontact.php doesn't check that the user is authorized before injecting new contacts into the wpcontact table...
7.5CVSS7.4AI score0.03232EPSS
SaveExploits1References2
CVE-2017-1002007: Missing Authorization
Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/savemail.php doesn't check that the user is authorized before injecting new contacts into the wpcontact table...
7.5CVSS7.4AI score0.03232EPSS
SaveExploits1References2
20