CVE-2020-9043

The wpCentral plugin for WordPress, versions before 1.5.1 , is vulnerable to an improper access control flaw that allows for the disclosure of the connection key . An attacker exploiting this vulnerability could access the WordPress Admin account connection key, potentially leading to the retriev...

wpCentral < 1.5.1 - Improper Access Control to Privilege Escalation

The flaw allowed anybody to escalate their privileges to those of an administrator, as long as subscriber-level registration was enabled on a given WordPress site with the vulnerable plugin installed. 1. Log in as Subscriber. 2. Scrape the page /wp-admin/index.php for the connection key. i.e. vie...

WordPress wpCentral plugin <= 1.5.0 - Improper Access Control vulnerability leading to Privilege Escalation

Improper Access Control vulnerability leading to Privilege Escalation discovered by WordFence in WordPress wpCentral plugin versions = 1.5.0. Solution Update the WordPress wpCentral plugin to the latest available version at least 1.5.1...

CVE-2020-9043: Exposure of Sensitive Information to an Unauthorized Actor

The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...

PT-2020-20456

Name of the Vulnerable Software and Affected Versions wpCentral plugin versions prior to 1.5.1 Description The issue allows any user to elevate their privileges to the administrator level and remotely manage the site through the wpCentral administrative panel. It is estimated that over 60,000 sit...

wpCentral < 1.4.8 - Privilege Escalation

There’s a vulnerability that allows anyone who is logged in with any user role to escalate their privilege, or alter/upload any file, or adjust any plugin and interact with the site in many other ways. PoC In wpcentral.php, AJAX actions are registered. However, it's only checking whether or not t...

wpCentral < 1.4.8 - Privilege Escalation

There’s a vulnerability that allows anyone who is logged in with any user role to escalate their privilege, or alter/upload any file, or adjust any plugin and interact with the site in many other ways. In wpcentral.php, AJAX actions are registered. However, it's only checking whether or not the...

WordPress wpCentral plugin <= 1.4.7 - Privilege escalation vulnerability

Privilege escalation vulnerability found by WebARX in WordPress wpCentral plugin versions = 1.4.7. Solution Update the WordPress wpCentral plugin to the latest available version at least 1.4.8...