CVE-2024-11103 Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover

🗓️ 28 Nov 2024 09:09:47Reported by WordfenceType

CVE-2024-11103 Contest Gallery <= 24.0.7 Unauthenticated Arbitrary Password Reset Privilege Escalatio

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-11103	28 Nov 202410:15	–	nvd
CVE	CVE-2024-11103	28 Nov 202410:15	–	cve
Patchstack	WordPress Contest Gallery Plugin <= 24.0.7 is vulnerable to Privilege Escalation	27 Nov 202400:00	–	patchstack
Cvelist	CVE-2024-11103 Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover	28 Nov 202409:47	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 25, 2024 to December 1, 2024)	5 Dec 202415:44	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:contest_gallery:contest_gallery:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "contest_gallery",
    "product": "contest_gallery",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "24.0.7"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3196011/contest-gallery/tags/24.0.8/v10/v10-admin/users/frontend/login/ajax/users-login-check-ajax-lost-password.php
plugins	www.plugins.trac.wordpress.org/browser/contest-gallery/trunk/v10/v10-admin/users/frontend/login/ajax/users-login-check-ajax-lost-password.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0df7f413-2631-46d9-8c0b-d66f05a02c01
plugins	www.plugins.trac.wordpress.org/browser/contest-gallery/trunk/v10/v10-admin/users/frontend/login/ajax/users-login-check-ajax-password-reset.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo